CJEU C-634/21 SCHUFA Holding (Scoring) 7 Dec 2023
Credit scoring = Art. 22(1) 'automated individual decision-making' when a third party heavily relies on a probability value to form or end a contract with a data subject. A ruling of "ground-breaking importance for AI-based decisions" according to the Hamburg DPA!
Oct 20, 2024
—
4 min read
You might also like
CJEU C-638/23 Amt der Tiroler Landesregierung 27 Feb 2025
members
–
2 min read
An entity without legal personality can be a controller if it can fulfil those obligations and national law at least implicitly defines the processing scope; it doesn’t need to precisely specify processing activities or purpose.
🚨 CJEU C-203/22 Dun & Bradstreet Austria 27 Feb 2025
members
–
3 min read
You must clearly explain actual procedures and principles applied in ADM and if you claim information contains protected data or trade secrets, you must provide it to the DPA or court, which'll balance rights and interests and determine the extent of a DSAR.
CJEU C-383/23 ILVA (GDPR fine) 13 Feb 2025
members
–
3 min read
When fining a controller in a corporate group, DPAs must base the maximum fine on the *group’s* total worldwide turnover from the previous business year. A crucial ruling for anyone in a company group – here's also text you can copy for an email to your Management/Board.