- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Company – €492,000 Fine (Germany, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A company in the finance sector was fined EUR 492,000 for using an automated system that wrongly declined credit applications. This ruling is significant because it shows that companies must ensure their decision-making processes are fair and transparent. Businesses should be cautious about relying solely on automated systems.
What happened
A finance company was fined for using an automated system that incorrectly declined credit applications without human oversight.
Who was affected
Individuals whose credit applications were wrongly declined by the automated system.
What the authority found
The DPA found that the company failed to provide adequate reasons for the negative decisions, violating data protection rules.
Why this matters
This case highlights the risks of automated decision-making in finance. Companies should implement human oversight to ensure fairness in their processes.
Source checks
Linked-source text retrieved.
Automated check recorded — 6 March 2026.
Processing notes: articles corrected, authority corrected.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
The DPA of Hamburg has imposed a fine of EUR 492,000 on a company in the finance sector. The controller used automated systems to decide whether to approve a credit application, with no human input. This system incorrectly declined applications from applicants with a good credit score. When asked for the reasons for the negative decision, the controller also failed to respond adequately to these information requests.
Related Enforcement Actions (13)
Other enforcement actions involving Company in DE
Fine
€492K
Details
Fine Date
30 September 2025
Authority
Bundesbeauftragter für den Datenschutz
Fine Amount
€492,000
Enforcement Tracker ID
ETid-2892
About this data
Cite as: Cookie Fines. Company - Germany (2025). Retrieved from cookiefines.eu
Last updated: