Data Protection Advocates Threaten Schufa With Class Action Lawsuit

August 27, 2026, 1:18 pm | Read time: 3 minutes

The data privacy dispute involving Schufa is gaining momentum. The privacy organization Noyb is taking action against the credit agency and demanding changes in how stored consumer data is handled. This involves information that, according to the organization, should be deleted.

Noyb has officially issued a warning to Schufa. The organization demands that data be removed after the designated storage periods expire. Additionally, it insists that consumers should be able to view older data sets when requesting information under Article 15 of the GDPR. If Schufa does not comply with these demands, Noyb plans to file an injunction.

Privacy Advocates Demand Changes in Data Disclosures

The conflict was triggered by a so-called “shadow database” that came to light in July. In addition to the known database, Schufa is alleged to maintain another collection with historical information. This reportedly includes past loans, garnishments, personal bankruptcies, and already settled debts. These data are said to remain available years after their deletion from regular records.

According to the allegations, these details are not currently shown to consumers, even when they request a free data copy.

O2, Vodafone, and Deutsche Telekom are the major players in Germany's telecommunications market. They have been investing heavily in expanding their 5G networks to meet the growing demand for faster and more reliable mobile internet. This expansion is part of a broader effort to enhance digital infrastructure across the country, which is seen as crucial for economic growth and competitiveness. The companies are also focusing on improving customer service and offering more flexible plans to attract and retain subscribers. Potential Class Action Looms Against Mobile Carrier

Unique System What Does Schufa Know About Me?

Up to 500 Euros in Damages at Stake

Schufa justifies the storage of historical information partly for testing and control purposes. The data is said to be used to verify credit ratings and demonstrate their quality.

Noyb is considering a class action as a possible next step. This could affect individuals whose data is or was stored in the “shadow database” and who have requested information under Article 15 of the GDPR in recent years.

According to Noyb, Schufa manages data on more than 69 million people. Each year, around 1.6 million individuals reportedly receive incomplete responses to their information requests. Therefore, the organization considers non-material damages of about 500 euros per affected person possible.

Schufa Rejects the Allegations

Schufa disputes the accusations. In a statement available to TECHBOOK, the company explains that the processing of historical data complies with legal and regulatory requirements. “Noyb still demands in the injunction that historical data be deleted. This would be harmful to consumers and the economy,” Schufa states.

Also of interest: Amazon customers could now get money back

According to the company, historical data and data tests are needed to develop scientifically robust scores, control their quality, and ensure transparency and traceability in data usage.

“Noyb’s demand does not strengthen consumer protection but would eliminate essential prerequisites for fair and accurate credit ratings. We will defend the storage of historical data in court–even if we have to go to the Federal Court of Justice again.”

Whether a class action will actually occur is currently uncertain. However, Noyb has already published a list online. Potentially affected individuals can register there and be informed about a future procedure.

This article is a machine translation of the original German version of TECHBOOK and has been reviewed for accuracy and quality by a native speaker. For feedback, please contact us at info@techbook.de.