Following several complaints, Austria’s highest data protection authority (DSB) recently issued a decision against the credit agency CRIF GmbH (hereinafter: CRIF), stating that the sole processing of the personal data “name, address and date of birth” for the purpose of credit assessment does not meet the requirements of the General Data Protection Regulation (GDPR) the credit agency CRIF.
DSB’s reasoning the credit agency CRIF
Particular attention should be paid to the DSB’s reasoning regarding the examination of the usa business fax list legality requirements for a change of purpose pursuant to Art. 6 (1) (f) in conjunction with Art.
Digression:
Even before the GDPR came into force, the German Federal Data Protection Act (old version) stipulated that credit assessments could not be based solely on address data , as this would pose a significant risk of residential discrimination (so-called “redlining”). This regulation was incorporated into Section 31 Paragraph 1 Nos. 3 and 4 of the Federal Data Protection Act (BDSG). So that under current German law, why is a website ‘taking too long to respond’ & how to fix it is prohibit. National law to use exclusively address data to calculate the probability value (= score) .
The German regulation formulates clear guidelines regarding the problem of redlining; a corresponding national regulation does not exist in Austria. However in the absence of a clear opening clause, the national legislature may not unilaterally impose a balancing of interests. This is also the case in the opinion of Advocate General Priit Pikamäe in the currently awaited ECJ ruling .
Result of the DSB review and second procedure
In the subsequent second procedure. The DPO, albania business directory within the framework of a balancing of interests pursuant to Art. 6 (1) (f) GDPR. Finally came to the conclusion that the lack of lawfulness of the previous data processingresulted in the inadmissibility of the subsequent data processing by as. Recipient of the complainant’s personal data In the context of the balancing of interest. The DPO states that CRIF’s economic interest in processing personal data for. The purpose of credit assessment as counter-interests in the present case.