Recital 61

(61)Where a decision to reject an application for credit is based on data obtained through the consultation of a database or the lack of data therein, the creditor should inform the consumer thereof, and provide the name of the database consulted and of any other elements required by Directive 95/46/EC so as to enable the consumer to exercise his right to access and, where justified, rectify, erase or block personal data concerning him and processed therein. Where a decision to reject an application for credit results from a negative creditworthiness assessment, the creditor should inform the consumer of the rejection without undue delay. Member States should be free to decide whether they require creditors to provide further explanations on the reasons of the rejection. However, the creditor should not be required to give such information when to do so would be prohibited by other Union law such as provisions on money laundering or the financing of terrorism. Such information should not be provided where to do so would be contrary to the objectives of public policy or public security such as the prevention, investigation, detection or prosecution of criminal offences.