Schufa score: what information you are entitled to and how to get it
Schufa, Germany's largest credit bureau, must tell you free of charge what data it holds about you and which scores it has passed on to whom. From 20 November 2026, § 37a of the Federal Data Protection Act (BDSG) adds another right: on request, the bureau must explain which criteria influence your score the most and how meaningful the score is.
On this page
On 21 October 2026, Germany's Federal Court of Justice (Bundesgerichtshof, BGH) ruled in four cases on when Schufa must explain how a score was calculated. The result: you are entitled to that explanation if a company based its decision on a contract largely on your Schufa score, and you do not have to prove this in every detail. Separately, you can request a free copy of your data at any time. From 20 November 2026, the new § 37a BDSG also obliges Schufa to explain the most important score criteria in plain language.
Key points
- The data copy under Art. 15 GDPR is free and shows all stored data, your scores and who received them.
- According to the BGH (judgments of 21 Oct 2026, I ZR 227/25 to 230/25), it is enough that a rejection coincides in time with a score being transmitted. The score is then presumed to have been decisive.
- From 20 Nov 2026, Schufa must, on request, name the data, criteria and weighting that influence your score most (§ 37a(4) BDSG).
- Name, age, gender, address, bank account transactions and social media data may no longer be used in the score from that date.
- You can challenge a score-based decision with the bank and ask for it to be reviewed by a human (§ 37a(5) BDSG).
What does the free Schufa data copy contain?
The data copy (Datenkopie) under Art. 15 GDPR lists everything Schufa has stored about you: personal details, previous addresses, current accounts, credit cards, current and repaid loans, mobile phone and leasing contracts, enquiries from companies and any payment defaults. It also includes your current scores and the scores passed on to companies in the last twelve months. Under Art. 15(3) GDPR, the first copy is free.
Since 17 March 2026, Schufa has used a new score. According to the Verbraucherzentrale (consumer advice centre), it runs from 100 to 999 points, is based on 12 published criteria and is the same for consumers and companies. Previously, banks, mail-order retailers and mobile providers each saw their own industry scores. At launch, however, only about 25 per cent of Schufa's contract partners used the new value. According to Schufa, around 8 per cent of consumers moved into a worse class with the change, while around 9 per cent moved up.
You order the data copy using the form on meineschufa.de. It arrives by post, usually within a few days. Make sure you choose the free form and not one of Schufa's paid subscription products. Check the copy for outdated entries, wrong addresses and contracts you do not recognise. How banks use the score when you apply for a loan is explained in the guide Improving your credit rating.
What did the BGH decide on 21 October 2026?
The BGH set out when Schufa must disclose the logic behind a score: whenever a company's decision on a contract with you "maßgeblich von dem an ihn übermittelten Scorewert abhängt", meaning it depends largely on the score it received. That is the wording of press release no. 198/2026. The legal basis is Art. 15(1)(h) and Art. 22(1) GDPR as interpreted by the Court of Justice of the European Union in judgment C-634/21 of 7 December 2023.
The key point for consumers is the burden of proof. Several higher regional courts had required consumers to prove exactly that a rejection was caused by the score. The BGH lowers this hurdle: it is enough for you to state that Schufa transmitted a score to a company and that a decision against you followed shortly afterwards. According to the BGH, there is then a factual presumption that the score was decisive.
The four claimants have not won yet. The BGH set aside the judgments of the Dresden Higher Regional Court and sent the cases back, because findings on whether the claimants were adversely affected were missing. It did make clear, however, that Schufa's reply letters from 2023 would not have met its duty to inform if a claim exists. For you this means: if you were refused a loan, a rental flat or a mobile contract shortly after a Schufa enquiry, you have good arguments for an explanation of your score.
What changes from 20 November 2026?
From 20 November 2026, § 37a BDSG replaces the previous scoring rule in § 31 BDSG. It was introduced by Article 3 of the act implementing the EU Consumer Credit Directive (BGBl. 2026 I No. 139). The wording of § 37a BDSG brings two major changes: certain data are off limits for the score, and credit bureaus must explain the score on request without you first having to prove a rejection.
| Point | Until 19 Nov 2026 | From 20 Nov 2026 |
|---|---|---|
| Data copy | free (Art. 15 GDPR) | still free |
| Score explanation | only after a decisive decision (BGH) | on request: criteria and weighting |
| Address in score | allowed, but not alone | banned |
| Name, age, gender | not expressly regulated | banned |
| Account transactions | not expressly regulated | banned |
| Human review | under Art. 22 GDPR | challenge with the bank (para. 5) |
Under § 37a(4) BDSG, Schufa must tell you in "clear and plain" language which data and criteria it used, how the criteria that influence the value most are weighted against each other, how meaningful your specific score is and which scores it has passed on to whom. The deadline follows Art. 12(3) GDPR, which is usually one month. The bureau must keep the necessary information for one year.
It is still open how the new rule applies to scores calculated before 20 November 2026 and how the courts will see its relationship to the BGH case law. As of October 2026, there is no decision on this.
How do you request the information step by step?
In most cases two letters are enough: the data copy and, from 20 November 2026, a request under § 37a BDSG. Both can be sent informally by post or email.
- Request the data copy: fill in the form on meineschufa.de, enter your ID details and wait for the reply by post.
- Check the copy: are your address, accounts and loans correct? Which companies received a score in the last twelve months?
- Note the date after a rejection: if the company's enquiry came shortly before the refusal, the BGH presumes the score was the reason.
- From 20 Nov 2026, ask for an explanation. In German, for example: „Ich beantrage nach § 37a Abs. 4 BDSG Auskunft über die für meinen Scorewert genutzten Daten und Kriterien, deren Gewichtung, die Aussagekraft des Wertes sowie die erstellten Scorewerte und ihre Empfänger.“ (I request information under § 37a(4) BDSG on the data and criteria used for my score, their weighting, the significance of the value and the scores created and their recipients.)
- Set a deadline: if you have no adequate answer after one month, you can complain to the competent data protection authority. As Schufa is based in Wiesbaden, that is the Hessian Commissioner for Data Protection and Freedom of Information (HBDI).
Keep the replies and proof of posting. They are your evidence if you later need to convince a bank, a landlord or a court.
What if an entry is wrong or your loan was rejected?
Schufa must correct a wrong entry under Art. 16 GDPR. Write to Schufa stating which entry is wrong and enclose evidence, such as the creditor's confirmation that a claim was paid or never due. At the same time, you can ask the reporting company to correct its report.
From 20 November 2026, § 37a(3) BDSG also limits which unpaid claims may be used in the score at all. These include claims confirmed by a court or expressly acknowledged by you, and claims where, after the due date, you received at least two written reminders, the first reminder was at least four weeks ago, you were told beforehand that Schufa might be notified and you did not dispute the claim. If you dispute a claim, it cannot enter your score via this reminder route. The only exceptions are a court judgment, an enforceable title or a finding in insolvency proceedings.
If a bank refused you a loan because of your score, you can challenge the decision under § 37a(5) BDSG, present your point of view and demand a decision by a human. What else you can do after a rejection is described in the guide Loan rejected. The duties banks have when checking creditworthiness from the cut-off date are summarised in New consumer credit rules from 20 November 2026. Before applying again, a loan comparison with rate enquiries helps, because other banks cannot see rate enquiries and they do not lower your score.
Frequently asked questions
Is the Schufa report free?
Yes. The data copy under Art. 15 GDPR is free and is sent by post. Only Schufa's add-on products cost money, such as the credit report for landlords or subscription models. The free copy also contains your current scores.
What did the BGH rule on Schufa on 21 Oct 2026?
The BGH ruled that Schufa must explain how a score is calculated if a company based a contract decision largely on that score. A link in time between the score being transmitted and the rejection is enough. The four cases (I ZR 227/25 to 230/25) go back to the Dresden Higher Regional Court.
What does § 37a BDSG change from 20 November 2026?
On request, credit bureaus must name the data and criteria used, their weighting, the significance of the score and who received the scores. Name, age, gender, address, account transactions and social media data may no longer be used in the score, and no scores may be created for minors.
How long does Schufa have to reply?
The deadline follows Art. 12(3) GDPR: without undue delay and within one month at the latest. In complex cases the deadline can be extended by two months, but Schufa must tell you so within the first month and give reasons.
Does requesting my own report lower my Schufa score?
No. Requesting your own data copy is an enquiry about yourself and has no effect on the score. Rate enquiries with banks have no effect either, unlike enquiries for a loan application.
What can I do if Schufa does not reply or the reply is inadequate?
Set a short extra deadline and then contact the data protection authority, which for Schufa is the Hessian Commissioner for Data Protection and Freedom of Information. If you suffered a concrete loss, such as a refused loan, a Verbraucherzentrale or a lawyer can assess whether a claim in court would succeed.
Selected sources
- Federal Court of Justice: press release no. 198/2026 of 21 Oct 2026 (German)
- § 37a BDSG (scoring), version from 20 Nov 2026 (German)
- Art. 15 GDPR: right of access by the data subject (German)
- Art. 12 GDPR: deadlines and form of the information (German)
- CJEU, judgment of 7 Dec 2023, C-634/21 (SCHUFA Holding, scoring)
- Verbraucherzentrale: the new Schufa score, key facts (as of 26 Jun 2026, German)
Note: This article is general information and not legal advice. It does not replace an assessment of your individual case by a lawyer or a consumer advice centre. No guarantee of accuracy; the law and case law may change.
Your next steps
Improving your credit rating
How banks check your creditworthiness, why rate enquiries do not affect your score and what changes on 20 November 2026.
Read moreLoan rejected
The most common reasons for a rejection, your rights after a refusal and what to do next.
Read moreNew credit rules 2026
Stricter credit checks, a usury limit and a capped right of withdrawal: all changes from 20 November 2026.
Read more