The CJEU SCHUFA Ruling: An Automated Credit Score Is a “Decision”

1Introduction

Article 22 GDPR gives individuals the right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, except in defined cases and with safeguards such as human intervention and the right to contest.

2Discussion

In Case C-634/21 (SCHUFA), judged on 7 December 2023, the Court held that the automated establishment of a probability value about a person’s ability to repay constitutes an automated decision under Article 22 where a third party, such as a bank, draws strongly on it in deciding on a loan.

3Conclusion

Credit bureaus therefore share responsibility for transparency, lawful basis and individuals’ rights. For any smart scoring system, explainability and human review are not optional features.

Sources

همفکران فناوری شریفThis article summarises the official sources cited, prepared by the Hamfekran Fanavari Sharif team for finance leaders.

Want to see these solutions in your organisation?Book a free demo