fineConcluded€492,000
Hamburg Commissioner for Data Protection (HmbBfDI) — Financial-services company (automated credit-card decisions)
December 31, 2025 · Germany
The Hamburg DPA fined a financial-services company about EUR 492,000 for insufficient transparency in an automated decision-making system that rejected credit-card applications despite applicants demonstrating good creditworthiness (reported in its 2025 activity report).
Key takeaway — how to prevent this
Audit AI hiring and HR tools for disparate impact; algorithmic screening that filters by age or other protected traits is unlawful.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.