lawsuitFiled

Court of Justice of the EU (Austrian referral, C-203/22) v. Dun & Bradstreet Austria GmbH

February 27, 2025 · Austria

In C-203/22 the CJEU ruled that a person subject to automated credit-scoring is entitled under Article 15(1)(h) GDPR to a meaningful explanation of the procedure and principles actually applied; a bare formula/algorithm is insufficient and trade secrets must be disclosed to the authority or court.

Key takeaway — how to prevent this

Don't overstate AI capabilities to investors or customers. 'AI-washing' — claiming AI you don't have, or that doesn't work as described — triggers securities and consumer-protection enforcement; disclosures must match reality.

Inclusion does not imply wrongdoing or liability. A filed lawsuit is an allegation, not a court finding. Status reflects the latest information we have — always check the official source for current status.