Regulatory Watch  /  Austria  /  Class action
Moderate impactClass actionAnnounced

noyb seeks participants for potential GDPR class action against Austrian credit agency CRIF

noyb alleges that CRIF processes personal data of millions of Austrians to calculate credit scores based on age, gender and address, potentially violating the GDPR. The organization plans a scientific review and, if evidence supports it, will file a class action lawsuit against CRIF and its partners. No final court decision has been issued yet.

Why it matters: A large GDPR class action could be filed against CRIF, affecting millions of Austrians whose credit scores are derived from questionable data practices.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
CRIF has a ‘score’ for almost everyone in Austria. noyb needs support for a potential class action lawsuit
noyb · primary source · Jun 3, 2025
CRIF has a ‘score’ for almost everyone in Austria. noyb needs support for a potential class action lawsuit
noyb · Jun 3, 2025
Details
JurisdictionAustria
RegulatorAustrian Data Protection Authority
LawGeneral Data Protection Regulation
StatusAnnounced
PublishedJune 3, 2025
Effectivenot stated
OrganisationsCRIF, noyb, Volksbank Wien, Erste Bank, Raiffeisenbank, Oberbank, Verbund, Magenta, Drei, Zalando
Topicsprivacy, purpose limitation, consent, profiling, automated decision making, data minimization, data brokers
Datapersonal