gateCreditScoring checks automated credit scores for explainability, contestability, and freedom from discrimination, based on the ECJ ruling of 7 December 2023 (Case C-634/21, SCHUFA). The mere creation of a probability value is an automated decision under GDPR Art. 22 once a third party decisively relies on it.
Every row is a hard boolean check, not probabilistic scoring. A critical failure leads to block, a high severity failure to warn, everything else to pass.
| Reference | Checks | Severity |
|---|---|---|
| EuGH C-634/21, 7.12.2023 | Score creation as automated decision on decisive third party use | critical |
| Art. 22 DSGVO | Traceable explanation, not a pure black box output | critical |
| Art. 22 Abs. 3 DSGVO | Effective contestability for the affected person | critical |
| § 31 BDSG | Prohibited proxy features absent, scientifically recognized method | critical |
| RL (EU) 2023/2225 | Understandable explanation of the creditworthiness check for consumers | medium |
No example is hypothetical, each is an actual test case from the test suite report.