Language:
PRODUCTS
MORE
Quantum Security 🔍 Search Request Access →
gateCreditScoring — A score is a decision, says the ECJ.
// IMMO.QUICK · GATECREDITSCORING · EUGH C-634/21 · BONITÄTSSCORES

A score is a decision, says the ECJ.

gateCreditScoring checks automated credit scores for explainability, contestability, and freedom from discrimination, based on the ECJ ruling of 7 December 2023 (Case C-634/21, SCHUFA). The mere creation of a probability value is an automated decision under GDPR Art. 22 once a third party decisively relies on it.

Test result: BLOCK. 3 of 3 test cases passed, missing explainability or contestability leads to block.
✓ RELEVANT IF...
  • Your score decisively feeds into a third party's decision, for example a bank declining a loan with it
× NOT RELEVANT IF...
  • The score is only used internally and never leads to a third party decision, then the SCHUFA ruling does not apply and the gate honestly returns pass with applicable: false
// Architecture

Legal basis as hard flags.

Every row is a hard boolean check, not probabilistic scoring. A critical failure leads to block, a high severity failure to warn, everything else to pass.

ReferenceChecksSeverity
EuGH C-634/21, 7.12.2023Score creation as automated decision on decisive third party usecritical
Art. 22 DSGVOTraceable explanation, not a pure black box outputcritical
Art. 22 Abs. 3 DSGVOEffective contestability for the affected personcritical
§ 31 BDSGProhibited proxy features absent, scientifically recognized methodcritical
RL (EU) 2023/2225Understandable explanation of the creditworthiness check for consumersmedium
HMAC-signed GateLog record
Every run writes an HMAC-signed GateLog record with identity binding (caller_did, caller_role) and a ten-year retention period. Deterministic: identical input produces identical output, no LLM, no external API.
// Worked examples

Four inputs, four outcomes.

No example is hypothetical, each is an actual test case from the test suite report.

Example 1 · Nexus not met
Score used only internally, no third party decision
PASS applicable: false
The SCHUFA ruling requires decisive third party use. Without it, the gate is honestly not applicable.
Example 2 · Critical, black box without contestability
No explainability, no contestability, prohibited proxy features
BLOCK 3 critical flags
A bank declines loans using this score, but nobody can trace why or object. The gate blocks its use for third party decisions.
Example 3 · All controls met
Explainable, contestable, no proxy features, scientifically recognized
PASS 0 flags
Every score is traceably justified and contestable. The gate certifies this score may be used for third party decisions.
// Clarification

What gateCreditScoring is not.

  • Not a ban on scoring itself. The gate does not prohibit computing a score, it requires explainability and contestability before it hands a third party the decision.

For credit bureaus and scoring providers that want to provably bind their scores to the SCHUFA ruling and GDPR Art. 22.

Request Access →