Article 19 2.

Member States shall ensure that only those creditors who are under the supervision of the national competent authority and who fully comply with Regulation (EU) 2016/679 have access to the databases used for assessing the creditworthiness of consumers.