Credit reference agency (CRA) Experian must make significant changes to how it handles people’s personal data within its direct marketing practice – or face sanctions under a new enforcement notice ...