Case Law · BGH ·I ZR 97/25 EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

I ZR 97/25 (This appears to be a legal citation and doesn't require translation.)

Judgment

Legitimate Interest Controllers Storage Limitation Retention Period Law Enforcement
Jan 7, 2026
Summary

Facts: The court has ruled that the data retention period for information regarding completed payment defaults by private credit agencies is not automatically limited by rules for deleting data from debtor registers, and that codes of conduct based on the GDPR (General Data Protection Regulation) can serve as a guideline when balancing interests in accordance with Article 6(1)(f) of the GDPR. The Federal Court of Justice has determined that the maximum retention period for data relating to a payment default that has already been resolved by a credit information agency is not limited by national rules for deleting data from a public debtor register.

Full text 2 paragraphs

Paragraphs carrying a topic or an applied provision show those connections inline
§

Facts: The court ruled that the retention period for data regarding completed payment defaults by private credit information agencies is not automatically limited by rules for deleting data from a debtor file, and that codes of conduct based on the GDPR (General Data Protection Regulation) can serve as a guideline for balancing interests in accordance with Article 6(1)(f) of the GDPR. The Federal Court of Justice has determined that the maximum retention period for data regarding a payment default that has already been resolved by a credit information agency is not limited by national rules for deleting data from a public debtor file. Summary in English: The responsible party, SCHUFA Holding AG, operates a credit information agency that collects and stores information about payment defaults reported by its contractual partners, with the aim of assessing the creditworthiness of consumers.

Legitimate Interest Storage Limitation Retention Period applies Art. 6(1)(f)
§

The responsible party, SCHUFA Holding AG, operates a credit information agency that collects and stores information about payment defaults reported by its contractual partners, with the aim of assessing the creditworthiness of consumers. --- *This content has been automatically translated using machine translation. The original version is available in the source language.* --- *This content was automatically translated using machine translation. The original version is available in the source language.*

How it connects

1 of 2 paragraphs apply legislation or carry a topic — see them in the full text ↓

References

Related across sources

Guidelines 4/2019 Article 25 Data Protection by Design and by Default Version 2.0 Adopted on 20 October 2020 Guidelines on data protection by design and by default Guidelines ·EDPB Oct 20, 2020 Privacy by Design & Default Privacy by Default Privacy by Design
Guidelines 3/2019 processing of personal data through video devices Guidelines ·EDPB Jan 30, 2020 Personal Data Processing Material scope (GDPR)
Guidelines 5/2019 criteria of the Right to be Forgotten in the search engines cases under the GDPR (part 1) Guidelines ·EDPB Jul 7, 2020 Right to be Forgotten Personal Data Right to Rectification
2025 EDPB Annual Report 2024 De EDPB heeft het Jaarraport van 2024 gepubliceerd. Met ook een handzame samenvatting voor degene die geen tijd hebben. Er wordt ook een lijst met zaken van enkele DPAs… Apr 23, 2025 Direct Marketing Legitimate Interest Privacy by Design
Guidelines 02/2025 processing of personal data through blockchain technologies EDPB, Guidelines 02/2025 on processing of personal data through blockchain technologies, 2025. Guidelines ·EDPB Jul 7, 2026 Personal Data Processing Privacy by Design & Default
Guidelines 9/2022 personal data breach notification under GDPR Guidelines ·EDPB Apr 4, 2023 Notification Obligation Data Breaches Personal Data
Related documents