AlgorithmWatch / Open Knowledge Foundation Germany OpenSCHUFA data-donation platform launch (22 May 2018)

On 22 May 2018 AlgorithmWatch and the Open Knowledge Foundation Germany publicly launched the openschufa.de data-donation platform — the operational front door of the OpenSCHUFA campaign and the first widely-noticed European participatory-data-donation campaign on an algorithmic-accountability target. The launch asked German residents to invoke their statutory right to a free annual disclosure of personal data held about them by SCHUFA — the dominant German consumer-credit scoring bureau — and donate the resulting credit-record disclosures to a single public dataset that AlgorithmWatch and the Open Knowledge Foundation Germany would analyse in partnership with data journalists at the public broadcaster Bayerischer Rundfunk and Spiegel Online. The launch landed three days before the European Union General Data Protection Regulation's Article 15 right of access became directly applicable on 25 May 2018, leaving the launch-day campaign operating under section 34 of the German Federal Data Protection Act (BDSG) for its first seventy-two hours and under GDPR Article 15 thereafter — the campaign's substantive demand and methodology unchanged across that statutory handover.

What launched on 22 May 2018

The launch made public three connected artefacts. The first was the openschufa.de portal itself — a public-facing platform supplying template subject-access-request letters, response-handling guidance, and a structured-upload interface that converted the credit-record disclosures donating citizens received from SCHUFA into a single comparable dataset under AlgorithmWatch's and the Open Knowledge Foundation Germany's joint civil-society stewardship. The second was the campaign's working theory of change — that statutory subject-access rights are the citizen-side lever for algorithmic accountability on private-sector scoring systems whose underlying scoring procedure is protected as a trade secret; by aggregating thousands of SCHUFA records into a single dataset under independent civil-society and journalist control, the campaign could substantiate or refute the public suspicion that the SCHUFA scoring procedure was operating in ways that diverged from the risk-signals SCHUFA itself claimed to be using without ever requiring SCHUFA to disclose its algorithm. The third was the data-journalism partnership with Bayerischer Rundfunk and Spiegel Online — the launch's working route from civil-society data analysis into the country's two most-read news outlets, on a publication timetable the campaign's launch positioned for late 2018.

The launch had been preceded by a Startnext crowdfunding round earlier in 2018 that raised more than €43,000 from more than 1,800 backers, a public mobilisation in its own right that AlgorithmWatch and the Open Knowledge Foundation Germany used to argue the launch was already standing on broadly-diffused German public concern about SCHUFA's operation rather than on a confined civil-society or academic-researcher constituency. The crowdfunded backers were the campaign's first public-facing audience and the platform's funding base.

The GDPR-eve framing

The launch's timing — three days before the European Union General Data Protection Regulation's 25 May 2018 effective date — was substantively load-bearing on the public-facing communications register the campaign opened on launch day. Under section 34 of the German Federal Data Protection Act (BDSG), then the operative right at launch, German residents could already obtain a free annual disclosure of personal data held by a data controller; under GDPR Article 15, directly applicable from 25 May 2018, the same right became available across the whole European Economic Area and was harmonised in scope and procedure. The campaign chose the 22 May 2018 launch deliberately into that statutory handover window — the data-donation platform went live three days before the GDPR's effective date, with template letters and response-handling guidance shaped to work under both the BDSG-section-34 and the GDPR-Article-15 procedural rules, and with the campaign's working assertion that GDPR's wider applicability made it the citizen-mobilisation moment to make the right-of-access mechanism legible to a German public that had largely not previously exercised it.

The civil-society coalition shape at launch

The launch was carried by two German civil-society organisations operating as equal lead partners rather than as a lead-org-plus-supporting-orgs coalition. AlgorithmWatch — at the moment of launch a seven-month-old non-profit gGmbH headquartered in Berlin, with charitable-status determination issued the previous summer — contributed the algorithmic-accountability advocacy-and-research lead, with executive director Matthias Spielkamp named on the campaign portal's impressum as the responsible party. The Open Knowledge Foundation Germany — the German national chapter of the Open Knowledge Foundation, working on open data, government transparency, and civic technology in Germany since 2011 — contributed the platform-build and statutory-rights-mobilisation expertise that turned the citizen-side subject-access right into an operational data-donation interface. Beyond the two lead civil-society organisations, the launch named two professional data-journalism partners — Bayerischer Rundfunk's data-journalism desk as the German public-broadcaster anchor and Spiegel Online's data-journalism team as the largest-circulation German online newspaper anchor — committed to the analysis of the donated records and to the late-2018 public-facing reporting of the findings.

The launch's coalition shape — two-civil-society-organisation lead, with professional data-journalism partners contracted in for the analysis-and-publication leg — is structurally distinct from the other algorithmic-accountability launches in the corpus and contributes a coalition pattern the corpus had not previously held. The Internet Freedom Foundation's Project Panoptic launch of 27 November 2020 on the Indian / South-Asian track was carried by a single civil-society organisation with a volunteer civic-technology build team; the EDRi-coordinated Reclaim Your Face ECI launch of 17 February 2021 on the pan-European biometric-rights track was carried by a thirty-nine-organisation coalition through a Treaty-level citizen-participation channel. OpenSCHUFA's two-civil-society-leads-plus-data-journalism-partners shape sits between the two — heavier on the analysis-and-publication leg than the IFF tracker, lighter on the coalition-coordination leg than the Reclaim Your Face ECI, and operationally distinct from both in being anchored on a private-sector consumer-credit-scoring target rather than on state surveillance technology.

The six-month arc the launch opened

The 22 May 2018 launch opened a six-month arc that closed on 28 November 2018 with AlgorithmWatch's and the Open Knowledge Foundation Germany's joint publication of the analysis of approximately 2,000 of the more than 4,000 donated SCHUFA records — the first systematic public examination of how a major European consumer-credit scoring system was operating in practice. Over the six months the launch made operational, the campaign generated more than 30,000 subject-access requests to SCHUFA specifically and more than 100,000 subject-access requests across the wider German consumer-credit-scoring field (the parallel firms Boniversum, CRIF Bürgel, infoscore Consumer Data, and Deltavista, against which the campaign actively encouraged participants to file subject-access requests in addition to SCHUFA itself), figures the launch-day platform had been engineered to support. The launch did not itself produce the campaign's published findings — those were a six-month-downstream outcome — but the campaign's substantive findings (scores diverging from the named risk-signals SCHUFA itself claimed to be using; up-to-ten-per-cent divergence between SCHUFA's two simultaneously-operating scoring versions) and the campaign's wider public-record outcomes (the German Consumer Affairs Council's subsequent demand for improved information policy from scoring agencies; Bundestag-level political pressure for credit-scoring transparency legislation) depended end-to-end on the launch-day platform having stood the participatory-data-donation architecture up at the scale the launch made possible.

Significance for the corpus

The 22 May 2018 launch is the corpus's first event anchored in Germany — and the corpus's first event anchored anywhere in the German-speaking digital-rights field (DACH: Germany, Austria, Switzerland) — closing a substantial geographic gap on the corpus's event slice that the AlgorithmWatch and OpenSCHUFA campaign-side entries had previously sat in without a single Germany-anchored Event on the record. The launch is also the corpus's first event whose operational form is a public data-donation platform launch — structurally distinct from the public-tracker-and-petition launch register of the IFF Project Panoptic launch, the coalition-launch-and-signature-window register of the EDRi Reclaim Your Face ECI launch, the coalition-launch register of the Access Now #KeepItOn launch and the Campaign to Stop Killer Robots London launch, and the public-petition-filing register of the Foxglove / Motaung Meta-Sama petition filing. It is the corpus's first event whose substantive target is a private-sector consumer-credit-scoring system rather than a state surveillance, content-moderation, or AI-policy target, and the corpus's first event whose principal participatory mechanism is a citizen-side subject-access-request mobilisation channelled into civil-society-stewarded public-dataset construction.

Within the campaign's own arc, the 22 May 2018 launch is the operational moment the campaign's working theory of change became publicly actionable in concrete terms — the moment that turned the participatory-data-donation methodology from a designed methodology into a running citizen-mobilisation channel, the moment that gave AlgorithmWatch and the Open Knowledge Foundation Germany the data-collection architecture the November 2018 findings rested on, and the moment that established the participatory-data-donation pattern AlgorithmWatch has reused and adapted across the seven years of signature projects since — the 2020–2021 Instagram newsfeed monitoring, the 2020-ongoing DataSkop infrastructure, and the wider Automating Society reporting line — and that adjacent European civil-society organisations working on consumer-credit, recommender-system, and public-sector ADM accountability have picked up as the field's running European working template for citizen-mobilised algorithmic-accountability research.