The Court of Justice of the European Union issued two judgments: one confirming national courts can fully review DPA decisions, and another finding that automatically calculated credit scores breach Article 22 GDPR. The rulings require credit agencies to obtain explicit consent and allow data subjects to challenge scores.
Why it matters: The decisions tighten GDPR enforcement by prohibiting automated credit scoring and strengthening data subjects' rights to judicial review.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
