A reform of the Federal Data Protection Act is intended to strengthen the rights of consumers against credit reporting agencies such as Schufa. The federal government is responding to a ruling by the European Court of Justice (ECJ) with a corresponding draft law.

Data that may not be used in the future so that companies can assess a person's ability and willingness to pay includes, among other things, home address, name or personal data from the use of social networks. Information about incoming and outgoing payments to and from bank accounts is also taboo.