CJEU’s first ruling on Article 22 GDPR: ‘credit scoring’ is an automated decision

On 7 December 2023, the Court of Justice of the European Union (CJEU) gave judgment in Case 634/21 SCHUFA, the first ruling to determine the scope of the right not to be subjected to automated decision making (ADM) in Article 22 of the General Data Protection Regulation (GDPR).    Every Continue Reading