noyb to file injunction against SCHUFA over shadow database
The planned injunction highlights enforcement of EU data‑protection rights against a major credit reference agency.
ADTP Regulatory Watch· September 10, 2026
ImpactLow 34
Type⚖️ Enforcement Action
Statusannouncednot law
JurisdictionEU-DE
What happened
noyb sent a cease-and-desist letter to SCHUFA demanding the removal of its shadow database. SCHUFA's deadline to comply has expired and the agency has rejected the allegations. noyb announced it will now file an injunction and invites interest in a potential class action.
Why it matters for trust and compliance
Its status is announced. It is not law yet. Track it, but do not treat it as an obligation.
The planned injunction highlights enforcement of EU data‑protection rights against a major credit reference agency.
Who is affected
financial servicescontrollerdata brokerSCHUFA
Recommended actions
Check that privacy notices describe the practices this addresses.
Confirm access, correction, deletion and opt-out requests are handled within the required time.
Revisit retention schedules and data minimisation for the data involved.
Inventory AI or automated decision systems in scope and their assessments.
Regulations library
Every US state privacy law, on one map
24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.