What happened?

The Bayreuth Regional Court sent a surprisingly clear signal in May 2025: Schufa must pay a woman 3,000 euros in damages. Why? Because her score value was not comprehensible - and she was therefore economically disadvantaged. In concrete terms: no loans, no contracts, bad cards with landlords.

Schufa was unable or unwilling to explain clearly how exactly its score was calculated. The problem: this score often determines whether you can get a cell phone contract or even rent an apartment. And this is exactly where the court comes in: If this score is so decisive, it must also be comprehensible.

GDPR strikes: What Schufa has done wrong

The ruling was not only about justice - but also about data protection. To be more precise: the European General Data Protection Regulation (GDPR). The judges saw two violations at once:

  • Article 15 GDPR: Schufa must disclose which data it uses.
  • Article 22 GDPR: Fully automated decisions without human intervention - as with the score - are only permitted under strict conditions.

The woman did not simply receive 3,000 euros because she was angry, but because she was entitled to something under data protection law that she was denied: Insight into her own data and the evaluation that was derived from it. Or, as we would say in everyday life: she wanted to know why she was "devalued" - and received no answer.

What does this mean for all of us now?

This ruling is more than just an isolated case. It is a wake-up call to anyone who has ever asked themselves: "Why was my loan rejected?" or "Why can't I get a cell phone contract even though I've never had any debts?"

Because one thing is clear: Schufa must now become more transparent. And all those affected have a new means of exerting pressure. Anyone who believes that they have been disadvantaged by opaque or incorrect Schufa entries can invoke this ruling in future - and, in case of doubt, demand money.

How to protect yourself from the data trap

  1. Obtain your Schufa data regularly.
    Once a year, you can request a free self-disclosure online.
  2. Check the entries carefully.
    Even small errors can have major consequences.
  3. Consult a lawyer if things get serious.
    Not every entry is legal - and not every rejection has to be accepted.

It's getting uncomfortable for the data giants

We say: It's high time! For years, Schufa has been judging our lives with numbers - without us knowing exactly how it arrives at its results. The ruling is a first step in the right direction. After all, what good is a data protection law if it is not enforced?

And: this ruling shows that it is possible to defend oneself - and that courts are prepared to do right by consumers. This is to be welcomed - even if it is now inconvenient for some institutions. Transparency is not a luxury, but a fundamental right.

Subscribe to the newsletter

and always up to date on data protection.