The Austrian Supreme Court has asked the EU’s top court to clarify whether online retailers can legally use automated credit checks to limit customer payment options without violating data protection rights. The case centers on whether such decisions—like refusing installment payments based solely on algorithmic scoring—significantly affect consumers under Article 22 of the GDPR. The outcome could set a major precedent for how e-commerce companies across Europe use automation in financial decisions.

The Privacy Commissioner of Canada has released updated guidance for public and private sector organisations on the responsible use of biometric technologies, following an extensive consultation process.