EU Court of Justice · 27 February 2025
Dun & Bradstreet Austria (explanation)
In plain English
A woman refused a mobile phone contract after an automated credit check was entitled to an explanation of the procedure and principles actually used. Where trade secrets or other people's data are involved, the controller must give them to the regulator or court, which decides what she sees.
What the court ruled
the data subject may require the controller, as ‘meaningful information about the logic involved’, to explain, by means of relevant information and in a concise, transparent, intelligible and easily accessible form, the procedure and principles actually applied in order to use, by automated means, the personal data concerning that person with a view to obtaining a specific result, such as a credit profile.
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the court’s own records is authoritative. The plain-English line is Fino’s own summary, not legal advice.