Skip to content
News·noyb - European Center for Digital RightsEN
Export

Creditors' association earns millions with (actually) cost-free GDPR rights

Credit Scoring Today, noyb filed a complaint and report against the creditors’ association KSV1870 with the Austrian data protection authority.

Full text

Credit Scoring Today, noyb filed a complaint and report against the creditors’ association KSV1870 with the Austrian data protection authority. Although Article 15 GDPR stipulates that the right of access must be free of charge, KSV is making huge profits from it. They use misleading website designs to urge people to purchase a high-priced "InfoPass" instead of getting a free copy of their data. The main target of this scheme appears to be foreigners. For example, the Department of Immigration (MA35) in Vienna requires KSV data as proof of solvency. The damage to unknowing victims is likely to run into the millions. Machine-translation of the Complaint and report against KSV1870 (EN)Report by the City of Vienna Court of AuditProof of financial solvency. Anyone wishing to apply for an Austrian visa or to extend their residence permit must be able to prove to the immigration authorities that they can support themselves without state assistance. For this purpose, the MA35 in Vienna, for e

How it connects

W101 2326836-1 40 natural persons submitted access requests to a mobile communications provider (controller) via an attorney Some of these persons were (former) customers of the controller, others have never been in a contractual relationship with the controller. In the access requests, the data… BVwG - W101 2326836-1 ·Federal Administrative Court Oct 2, 2026 Personal Data Right of Access Right to Restriction
C/09/697386 / HA ZA 26-52 Den Haag District Court: 51 gamblers sue Unibet operator Risepoint over unanswered GDPR The District Court of The Hague (the Court) considered an action brought by 51 individuals who had participated in online gambling offered through the website Unibet before 1… Rb. Den Haag Sep 2, 2026 Right of Access Personal Data Data Portability
€100,000 HDPA fines Teleperformance for failing to properly handle employee access request The DPA received a complaint from a former employee of the Service 800 Teleperformance Single Member S.A. (the controller), after the controller failed to comply with the data… Greece ·Art. 5, 12, 13 +3 Personal Data Right of Access Storage Limitation
200.361.079/01 Court of Appeal Den Haag: gambling operator must disclose transaction data under Art. 15 The data subject submitted an access request, in electronic format, of his gambling data to Risepoint Limited (the controller), the operator of online gambling services in the… Sep 29, 2026 Personal Data Data Portability Right of Access
Danish DPA finds employer unlawfully refused former employee's access request The DPA received a complaint from a former employee (data subject) of the controller concerning the refusal of an access request. More specifically, the data subject was dismissed… 2025-31-2078 ·Denmark ·Datatilsynet (DK) Sep 24, 2026 Right of Access Personal Data Supervisory Authorities
RON 5,242 Spitalul Veterinar Tineretului SRL A data subject filed an access request with the veterinary clinic Spitalul Veterinar Tineretului SRL (controller) concerning copies of a telephone conversation and video… Romania ·ANSPDCP ·Art. 15 Oct 13, 2026 Personal Data Right of Access Controllers