Abstract
The advent of Artificial Intelligence (AI) has opened many opportunities and, equally, has brought many challenges. This is also true for the banking sector, as the Schufa case attests. The purpose of this paper is to examine the CJEU’s decision in the Schufa case regarding AI use within the banking sector and its legal implications. This case questions recent practices concerning credit scoring and demands more robust protection of individual rights and a more accountable use of AI in the financial sector. Th e ongoing dependence of banks on automated decision-making to assess the creditworthiness of their clients raises important questions about transparency and fairness regarding the outcomes of such assessments. Th e paper offers an analysis of the GDPR, namely Article 22(1), and the criteria for automated decision-making clarified in the Schufa case, particularly in situations that fall outside the scope of the GDPR.