Privacy Advocates Sue Over 'Schufa Shadow Database'

September 14, 2026, 9:38 am | Read time: 4 minutes

The data privacy dispute involving Schufa is gaining momentum. The privacy organization Noyb is taking action against the credit agency and demanding changes in how stored consumer data is handled. This involves information that the organization believes should be deleted.

Update (September 11, 2026): The announced lawsuit has now become a reality: Noyb has filed the announced cease-and-desist lawsuit against Schufa after a deadline expired. “Schufa’s arguments are completely grotesque,” says Max Schrems, chairman of Noyb. “Apparently, Schufa believes it is a kind of semi-divine institution that stands above European laws. We look forward to putting an end to this.”

In an official statement, Schufa strongly rejects the allegations. The company emphasizes that it does not operate a secret shadow database but uses a regular data archive, as is common in companies. The historical data stored there is needed to meet legal and regulatory requirements, enable data protection controls, and ensure the development and quality assurance of credit scores. Schufa also points out that it processes data according to legal requirements and storage periods agreed upon with data protection authorities.

Regardless of the outcome of the legal dispute, the company also announces that it will continue its transparency initiative and expand its information concept by 2027. This aims to address “specific information needs” while keeping the information clearer and more understandable.

The original news follows:

Noyb has officially warned Schufa. The organization demands that data be removed after the designated storage periods expire. Additionally, it calls for consumers to be able to view older data sets when requesting information under Article 15 of the GDPR.

Privacy Advocates Demand Changes in Data Disclosures

The conflict was triggered by a so-called “shadow database” that came to light in July 2026. In addition to the known database, Schufa is alleged to maintain another collection of historical information. This reportedly includes past loans, garnishments, personal bankruptcies, and already settled debts. These data are said to remain available years after their deletion from regular records.

According to the allegations, this information is not currently shown to consumers, even if they request a free data copy.

Unique System What Does Schufa Know About Me?

O2, Vodafone, and Deutsche Telekom are the major players in Germany's telecommunications market. They have been investing heavily in expanding their 5G networks to meet the growing demand for faster and more reliable mobile internet. This expansion is part of a broader effort to enhance digital infrastructure across the country, which is seen as crucial for economic growth and competitiveness. The companies are also focusing on improving customer service and offering more flexible plans to attract and retain subscribers. Potential Class Action Looms Against Mobile Carrier

Up to 500 Euros in Damages at Stake

Schufa justifies the storage of historical information partly for testing and control purposes. The data is said to be used to verify credit ratings and demonstrate their quality.

The class action lawsuit now filed could affect people whose data is or was stored in the “shadow database” and who have requested information under Article 15 of the GDPR in recent years.

According to Noyb, Schufa manages data for more than 69 million people. Each year, around 1.6 million people reportedly receive incomplete responses to their information requests. Therefore, the organization considers non-material damages of around 500 euros per affected person possible.

Schufa Rejects the Allegations

Schufa disputes the accusations. In a statement available to TECHBOOK, the company explains that the processing of historical data complies with legal and regulatory requirements. “Nevertheless, Noyb demands in the cease-and-desist lawsuit that historical data be deleted. This would be harmful to consumers and the economy,” Schufa states.

Also interesting: Amazon customers could now get money back

According to the company, historical data and data tests are needed to develop scientifically robust scores, control their quality, and ensure transparency and traceability in data usage.

“Noyb’s demand does not strengthen consumer protection but would eliminate essential prerequisites for fair and accurate credit ratings. We will defend the storage of historical data in court–even if we have to go to the Federal Court of Justice again.”

Noyb has published an online list. Potentially affected individuals can register there and be informed about the proceedings.

This article is a machine translation of the original German version of TECHBOOK and has been reviewed for accuracy and quality by a native speaker. For feedback, please contact us at info@techbook.de.