The Austrian Supreme Court (OGH) held that credit reference agencies may not collect personal data from address publishers that process the data for marketing purposes, confirming a GDPR purpose‑limitation breach. The ruling supports noyb’s planned class action against CRIF and AZ Direct.
Why it matters: The decision clarifies GDPR purpose‑limitation obligations for credit scoring, paving the way for a consumer class action in Austria.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
