CJEU C-634/21 SCHUFA Holding (scoring)
Credit scoring = Art. 22(1) 'automated individual decision-making' when a third party heavily relies on a probability value to form or end a contract with a data subject. 🚨 A ruling of "ground-breaking importance for AI-based decisions" according to the Hamburg DPA!
Oct 20, 2024
—
4 min read
You might also like
CJEU C-507/23 Pateretaju tiesibu aizsardzibas centrs
members
–
1 min read
A GDPR violation doesn’t automatically count as damage under Article 82(1). An apology can be enough to compensate for non-material damage, if it fully covers the harm, especially when the original situation can’t be restored. And if you're sorry or not doesn't matter!
C-200/23 Agentsia po vpisvaniyata
members
–
3 min read
An authority of a commercial register = both recipient and controller. Handwritten signatures = personal data. Temporary loss of control (e.g. public disclosure) can lead to damage, but harm must be proven. And a few more points in today's CJEU ruling!
CJEU C-621/22 KNLTB
members
–
2 min read
A long-anticipated case on whether a *commercial* interest can qualify as legitimate under Article 6(1)(f). The CJEU confirms that it can, provided the interest is lawful, but emphasises the *strict* necessity requirement.