- Enforcing jurisdiction
- Germany · Geography does not establish applicable law.
- Confirmed applicable legislation
- No confirmed legal basis recorded.
- Privacy topics
Court case Az: 4 U 884/24 – Court Ruling (Germany, 2025)
Privacy enforcement record
This record is classified outside cookie consent. Subject classification does not confirm an applicable law. It is not included in cookie statistics or the Risk Calculator.
A court in Germany ruled that a credit information agency must provide more information about how it calculates credit scores. This matters because people need to understand how their scores are determined, especially since these scores can affect their ability to get loans. The decision highlights the importance of transparency in how personal data is used.
What happened
The court decided that a credit information agency must give a data subject additional information about how their credit scores were generated.
Who was affected
The person affected was a data subject who sought detailed information about their credit scores from the agency.
What the authority found
The court held that the data subject had a right to additional information under GDPR, but not complete disclosure.
Why this matters
This ruling emphasizes the need for companies to be transparent about how they use personal data, particularly in scoring systems. It sets a precedent for individuals seeking clarity on how their data impacts their financial opportunities.
View original scraped data
Original imported citations before automated processing; the processing history does not establish independent verification.
Source checks
Linked-source text retrieved.
Automated check recorded — 19 March 2026.
No issues were reported by that automated check.
Retrieved text may be a secondary summary or an announcement. These automated statuses do not establish that the original decision was read or that the record received an independent legal review. How we check sources
A data subject sought detailed information from a credit information agency (the controller) about how their credit scores were generated. The controller produced scores using statistical models based on various categories of personal and financial data, while denying the use of sensitive data. In July 2023, the controller gave the data subject their stored data and their scores transmitted to third parties. In August 2024, the data subject demanded damages, recognition that the scoring was unlawful, adjustment of their scores, omission of disclosures, reimbursement of legal fees, and detailed information about the calculation methods. They argued that the scoring system is opaque and that lenders rely so heavily on the score that it effectively dictates whether a consumer can obtain credit, discouraging them from even applying. The Regional Court dismissed the claims. On appeal, the data subject argued that the court had ignored relevant CJEU judgments and that the controller had used characteristics such as age, gender, and residence history. They pointed to large fluctuations in transmitted probability values as evidence of arbitrariness. After withdrawing most of their original claims, they sought only detailed information on how their various scores had been computed on the basis of Article 15(1)(h) GDPR in conjunction with Article 22 GDPR. Specifically, they asked for which personal data and criteria were used, how the criteria were weighted, and what the significance of the resulting scores was, arguing that the information previously disclosed was insufficient because it did not allow them to understand how their scores were determined in detail. The court held that the data subject was entitled to additional, but not complete, information about how his credit scores had been generated. It reasoned that Article 15(1)(h) GDPR, read together with Article 22 GDPR, grants data subjects a right to individualized, comprehensible explanations of the logic, sign
Outcome
Court Ruling
A ruling by a national court on a data-protection matter.
Related Cases (0)
No other cases found for Court case Az: 4 U 884/24 in DE
This is the only recorded case for this entity in this jurisdiction.
Details
Ruling Date
7 October 2025
Authority
DPA OLGDresden
About this data
Cite as: Cookie Fines. Court case Az: 4 U 884/24 - Germany (2025). Retrieved from cookiefines.eu
Last updated: