Skip to content
News · noyb - European Center for Digital Rights EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Illegal data exchange between address publisher and credit ranking agency

How it connects

Full text

Credit Scoring Illegal data exchange between address publisher and credit ranking agency noyb filed a GDPR complaint against the credit ranking agency CRIF GmbH and the address publisher AZ Direct on March 18, 2021. The companies exchange data which violates the GDPR, as well as Austrian law. Address publishers are only allowed to pass on data for advertising purposes, but not to credit agencies for credit rating. Download: Complaint to the Austrian Data Protection Authority (PDF) Download: English machine translation of the complaint (PDF) CRIF and AZ Direct: GDPR violation as a common business model. The complainant had submitted an access request under Article 15 GDPR to CRIF. CRIF stated that it had stored his name, date of birth and some (partly outdated) residential addresses. The only data source mentioned was the address publisher AZ Direct. However, address publishers are only allowed to pass on data for advertising purposes. In the case of CRIF, it was very apparent that they

Similar Content