CJEU rules that two data processing practices by credit information agencies are contrary to GDPR
While “scoring” is permitted only under certain conditions, the prolonged retention of information relating to the granting of a discharge from remaining debts is contrary to the GDPR….