noyb lodged a GDPR complaint on 18 March 2021 against credit scoring firm CRIF GmbH and address publisher AZ Direct for exchanging personal data without a legal basis. The complaint alleges violations of the GDPR purpose‑limitation principle and Austrian law. The Austrian Data Protection Authority could impose fines of up to €20 million or 4 % of annual turnover.
Why it matters: The case highlights enforcement risk for data brokers and credit agencies that share personal data beyond permitted advertising purposes.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
