Enforcement · Data Protection Authority of Hamburg (HmbBfDI) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.
Company: Non-compliance with general data processing principles
How it connects
Related across sources
Case Law Deutsche Wohnen SE v Staatsanwaltschaft Berlin News Danish SA Declares Use of Google Analytics Unlawful Without Supplementary Measures Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR Guidance Guidelines 4/2019 on Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Literature GDPR Implementation Series ∙ Hungary: Introduction to the GDPR Application and a Brief History of Data Protection Literature GDPR Implementation Series ∙ Netherlands: The GDPR Implementation Act
Full text
The DPA of Hamburg has imposed a fine of EUR 492,000 on a company in the finance sector. The controller used automated systems to decide whether to approve a credit application, with no human input. This system incorrectly declined applications from applicants with a good credit score. When asked for the reasons for the negative decision, the controller also failed to respond adequately to these information requests.
Industry: Finance, Insurance and Consulting
Original document at the source datenschutz-hamburg.de