CJEU (SCHUFA): On credit scoring, automated decision-making and courts' review of DPA decisions
Two CJEU rulings on SCHUFA Holding: Credit scoring = ADM when decisive for granting credit + national courts can fully review legally binding DPA decisions.
Dec 7, 2023
—
2 min read
You might also like
CJEU C-21/23 Lindenapotheke 4 Oct 2024
members
–
5 min read
UPDATED: Competitors can take legal action against your GDPR violations if considered an illegal unfair commercial practice. And 'special category personal data' threshold is now lower—ordering pharmacy-only medicinal products online is considered sharing health data, requiring explicit consent.
CJEU C-252/21 Meta Platforms and Others (General terms of use of a social network) 4 July 2023
members
–
6 min read
Legal bases are interpreted stricter and while you might rely on legitimate interest for direct marketing, network security or product improvement, processing personal data must be *strictly* necessary (but is it correctly applied? 🤔)
CJEU C-621/22 KNLTB (legitimate interests)
members
–
3 min read
UPDATED: Article 6(1)(f) allows personal data to be disclosed for a commercial interest if the processing is strictly necessary and not outweighed by the interests, rights or freedoms of the data subjects. The interest doesn't have to be determined by law, but it must be lawful.