In July 2026, the NGO noyb issued a cease‑and‑desist letter to German credit agency SCHUFA demanding it stop storing data beyond retention periods and provide full historical data under Article 15 GDPR. The organization warned it will seek an injunction if SCHUFA does not comply and opened an interest list for a possible class action.
Why it matters: The action targets a potential GDPR breach affecting up to 69 million Germans and could lead to a large‑scale class action.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
