Enforcing jurisdiction
Iceland · Geography does not establish applicable law.
Confirmed applicable legislation
Privacy topics

unknown (Complainant) – Complaint Upheld (Iceland, 2020)

Complaint Upheld
Persónuvernd11 September 2020Iceland
final
Complaint Upheld

Privacy enforcement record

This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.

Creditinfo Lánstraust faced a complaint for not providing information on how a credit score was calculated. This case highlights the need for transparency in credit reporting.

What happened

A complainant requested information on their credit score calculation, which Creditinfo Lánstraust failed to provide.

Who was affected

A person whose credit score was assigned by Creditinfo Lánstraust and who disputed its accuracy.

What the authority found

The Persónuvernd found that Creditinfo Lánstraust did not adequately respond to the complainant's request for information.

Why this matters

This ruling emphasizes the importance of transparency in credit scoring processes. Companies involved in credit reporting should ensure they provide clear information to consumers about how scores are calculated.

Recorded legal citations
Automatically processed
Art. 5 GDPR
Art. 6 GDPR
Art. 15 GDPR
Art. 4(1) GDPR
Art. 4(2) GDPR
Art. 4(4) GDPR
View original scraped data
Art. 4(1) GDPR
Art. 4(2) GDPR
Art. 4(4) GDPR
Art. 5(GDPR)
Art. 6(GDPR)
Art. 15(GDPR)

Original imported citations before automated processing; the processing history does not establish independent verification.

Entities Involved

unknown (Complainant)
Creditinfo Lánstraust (Respondent)

Source checks

Linked-source text retrieved.

Automated check recorded — 23 March 2026.

Processing notes: articles corrected.

Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources

Full Legal Summary
Detailed

Creditinfo Lánstrausti had assigned a negative credit score to the data subject. The data subject requested information on how Creditinfo Lánstrausti had calculated his credit score. According to Creditinfo Lánstrausti, the main factors influencing the credit score were previous defaults, especially those within the last 24 months, searches in the debtors' default register and a relationship to a company, which was also on the debtors' default register. Other factors were age, relationships with companies, number of searches in the debtors' default register and with Creditinfo Lánstrausti, information from the tax register, residence and marital status. The data subject considered this score incorrect as he had always paid his debts and most of his bills on time. He had only failed to fully pay back a loan with his bank - the balance had also been subject of a lawsuit filed by the data subject against his bank. In February 2019, the data subject lodged a complaint against Creditinfo Lánstrausti with the Persónuvernd claiming that Creditinfo Lánstrausti *has not provided him with information under Article 15 GDPR on how his credit score was calculated, *has used data from the tax register and data on searches in the debtor's default register regarding the data subject when calculating his credit score, which was not allowed, and *has disseminated an incorrect credit score about him. The complainant also requested to completely ban Creditinfo Lánstrausti from selling individuals' credit scorings until a public body has conducted a thorough assessment of the accuracy of the credit scoring system that satisfactorily demonstrates its reliability. *Did Creditinfo Lánstrausti process personal data that it was prohibited to process? *Did Creditinfo Lánstrausti comply with the data subject's access request under Article 15 GDPR? Firstly, the Persónuvernd held that it is not entitled or competent to review the mathematical calculation formula and the probability assessmen

Outcome

Complaint Upheld

A data subject complaint that was upheld by the DPA.

Related Enforcement Actions (0)

No other enforcement actions found for unknown (Complainant) in IS

This is the only recorded action for this entity in this jurisdiction.

Details

Decision Date

11 September 2020

Authority

Persónuvernd

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
Automatically normalized and classified

Cite as: Cookie Fines. unknown (Complainant) - Iceland (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: