Share on LinkedInShare on LinkedIn

ARTICLE · 30 OCTOBER 2025

Balancing Access And Trade Secrets In Automated Credit-Scoring

Where verifying accuracy risks revealing third-party personal data or protected material, the controller must submit the full materials to the supervisory authority or a court.

European UnionIntellectual Property

CK v Dun & Bradstreet Austria - case no. C-203/22 from the Court of Justice of the European Union (CJEU)—arises from a dispute in Austria over access to "meaningful information about the logic involved" in an automated credit-scoring process.

The City Council of Vienna was dealing with the enforcement of a court order that required Dun & Bradstreet Austria (D&B), a credit-assessment company, to provide CK (an individual) with an explanation of the procedure and principles actually applied when profiling her personal data to generate a credit score.

The scoring had been used by a mobile telephony provider to refuse to conclude or renew a contract with CK. D&B provided only limited explanations and invoked trade-secret protection, according to Austrian law, also generally limited access where business or trade secrets could be affected.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See more popular content from