FineME
Back to Cases
technologyfinance · 2021

CRIF GmbH

The DSB fined CRIF GmbH €2 million for operating a credit scoring and personal data brokerage business without adequate transparency, without proper legal basis for special category data inferences, and for failing to facilitate access and erasure requests from data subjects.

Fine Imposed€2M
Authority

DSB

Regulation

Key Takeaways
  • Credit scoring firms must be transparent about their data sources and processing purposes, and must enable rights exercise.