The Austrian Data Protection Authority ruled that KSV1870's fully automated credit rating was unlawful and prohibited the agency from conducting such checks without the data subject's consent. The authority also ordered KSV1870 to provide a comprehensible explanation of the decision and reprimanded energy provider Unsere Wasserkraft for lack of transparency. The decision is not final and may be appealed.
Why it matters: The ruling reinforces GDPR limits on automated credit scoring and mandates transparency and consent for such decisions.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
