GermanyCan I find out what data a credit agency holds about me?
Yes, you have a legal right to access all personal data a credit agency holds about you, including your credit score and the logic behind it — subject to limited exceptions for trade secrets.
What the Law Says
Under EU and German data protection law, you have a fundamental right to know what personal data credit agencies store about you — including scoring models and sources — unless disclosure would harm legitimate business interests like trade secrets.
The General Data Protection Regulation (GDPR) grants you the right of access under Article 15. This includes the right to obtain confirmation that your data is being processed, access to that data, and information about its origin, recipients, purpose, and storage duration.
Germany’s Federal Data Protection Act (Bundesdatenschutzgesetz – BDSG) supplements this in §34, specifically addressing credit agencies. It confirms your right to receive your personal data, your credit score, and the key factors influencing it — while allowing agencies to withhold details that would reveal protected algorithms or confidential third-party methods.
You may exercise this right free of charge once per calendar year. Additional requests may be subject to a reasonable fee if they are manifestly unfounded or excessive.
What Courts Have Said
German courts have affirmed that transparency in credit scoring is essential to protect informational self-determination — but must be balanced against legitimate commercial confidentiality.
The court confirmed that individuals have a right to know both the personal data held by credit agencies and the essential logic of their scoring models. However, agencies may redact specific algorithmic parameters if disclosure would compromise legally protected trade secrets.
What to Do
Submit a written or online access request directly to the credit agency (e.g., Schufa, Creditreform, or Bürgel).
Include proof of identity (e.g., copy of ID card or passport) to prevent fraud.
Expect a full response within one month — including your stored data, score value, and a meaningful explanation of scoring criteria.
If denied or incomplete, file a complaint with the competent German data protection authority (e.g., LfDI Baden-Württemberg or BfDI at federal level).
Sources
Related Questions
Not legal advice. This article is general information based on publicly available sources, written for educational purposes. Laws change and individual situations vary. Consult a licensed attorney in your jurisdiction before acting on anything you read here. Last reviewed: June 2026.