Media report: Schufa apparently stores outdated consumer data for years in a shadow database

The investigation describes a so-called "shadow database" in which this sensitive information continues to be kept. Even among experts, this "shadow database" has so far been virtually unknown. When consumers request information about their Schufa account, there is no indication of this storage. Those affected do not learn that their data is still in the system.

Schufa earns its money by providing creditworthiness information to banks and commercial enterprises. According to its own statements, the private company, headquartered in Wiesbaden, uses the sensitive stored data for tests, the results of which it passes on to companies. Schufa is an abbreviation for "Schutzgemeinschaft für allgemeine Kreditsicherung" (Protection Association for General Credit Security). Schufa itself emphasized that its practices are lawful.

Schufa rejects the allegations

The responsible Hessian State Data Protection Commissioner is dealing with the matter. He stated that the proceedings have not yet been concluded. It therefore remains unclear whether the data storage in the shadow database will ultimately be deemed impermissible or whether Schufa will be able to defend its practices.

Data protection authority reviewing

The investigation by NDR and SZ thus raises fundamental questions about the transparency of one of Germany's most important credit bureaus. Consumers who obtain their self-disclosure from Schufa, according to the report, do not see which data is actually still stored about them. Critics see this as a significant deficit in the protection of personal financial data.

The matter could also have political consequences. Data protection authorities and consumer protection organizations have long been observing how credit bureaus handle sensitive information. Should the Hessian Data Protection Commissioner object to the practice, this would send a signal to the entire industry to regulate the handling of old data more strictly.

Schufa has been criticized for years because its credit assessments can have far-reaching consequences for contracts, rentals, or mobile phone contracts. Those who receive a negative rating often have little opportunity to review or correct the underlying data. The current revelations intensify this debate, as consumers, according to the report, do not even know that certain entries still exist at all.

The news was broadcast on 15.07.2026 on Deutschlandfunk. The report is based on the joint investigation by NDR and Süddeutsche Zeitung. Both editorial teams initially declined to comment further on request and referred to the ongoing reporting.