Swedbank rejected a Swedish citizen's request for information on how its automated mortgage interest rate is calculated, citing a trade‑secret claim. The refusal appears to breach Article 15(1)(h) of the GDPR, which requires meaningful information about the logic of automated decisions. Noyb has filed a complaint with the Swedish Data Protection Authority (IMY) seeking an investigation and possible fine.
Why it matters: The case highlights enforcement of GDPR transparency obligations for automated banking decisions.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.