[Nifty3929]

This wasn't clear to me in the article: "With the help of manipulative designs, people are prevented from obtaining a free copy of their data in accordance with Article 15 GDPR – even though they would actually be legally entitled to it."

Maybe you're talking about the score, but the score isn't data - it's an algorithm. "For example, in the case of the complainant, the free information included only a 'basic score', while the paid information showed six different 'industry scores.'"

And this is basically how it works in the US as well. When you get your free credit report, it will contain a score, but not the same score as is seen by a business requesting the report - because there are many different scores used for different purposes. The business pays for the score that matters to them which is different than what the consumer sees.

None of this feels particularly nefarious to me.