noyb lodged a complaint with the Austrian Data Protection Authority against credit reference agency KSV1870 and energy supplier Unsere Wasserkraft. The complaint alleges that customers are subjected to fully automated credit checks that determine contract eligibility without any human review, violating GDPR articles 13, 14, 15 and 22. The DPA is asked to ban KSV1870’s automatic credit scoring until it ensures limited, authorized individual case use.
Why it matters: The case highlights that fully automated credit decisions can breach GDPR protections for data subjects.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.