# Supreme Court: CRIF illegally collected data of millions in Austria. Way clear for class action!

- Type: News
- Source: noyb - European Center for Digital Rights
- Date: 2026-09-01
- Original: https://noyb.eu/en/supreme-court-crif-illegally-collected-data-millions-austria-way-clear-class-action
- Canonical: https://overview.legal/posts/353615
- Topics: Marketing, GDPR Article 5 Principles of Processing, Direct Marketing, Purpose Limitation, Training Data Requirements

## Summary

Credit Scoring In June 2026, noyb brought an injunction against the unlawful data collection practices of the Austrian credit reference agency CRIF. In several unrelated cases, the Supreme Court (OGH) has now ruled in favour of noyb: CRIF’s current practice of collecting data from address publishers violates the GDPR principle of ‘purpose limitation’. This means that a key allegation in noyb’s injunction has been confirmed by the highest court even before the first hearing. As a result, the pros

## Full text

Credit Scoring In June 2026, noyb brought an injunction against the unlawful data collection practices of the Austrian credit reference agency CRIF. In several unrelated cases, the Supreme Court (OGH) has now ruled in favour of noyb: CRIF’s current practice of collecting data from address publishers violates the GDPR principle of ‘purpose limitation’. This means that a key allegation in noyb’s injunction has been confirmed by the highest court even before the first hearing. As a result, the prospects of success for our class action against CRIF have further improved. Join the class action now! Austrian Supreme Court rulings: (1), (2), (3)Change of purpose not permitted. The principle of purpose limitation (Article 5(1)(b) GDPR) generally prohibits companies from reusing data processed for one purpose for other purposes. For example, data intended for postal advertising (‘direct marketing’) may not simply be used for credit assessments.Marco Blocher, data protection lawyer at noyb: “Mar

---
Generated by overview.legal · https://overview.legal/posts/353615 · 2026-09-01