Artificial intelligence (AI) and big data are transforming the credit market around the world. Algorithmic credit scoring (ACS) is increasingly used to assess borrowers’ creditworthiness, using technology to glean non-traditional data from smartphones and analyze them through machine-learning algorithms. These processes promise efficiency, accuracy, and cost-effectiveness compared with traditional credit scoring. However, this technology raises public concerns about opacity, unfair discrimination, and threats to individual privacy and autonomy. Many countries in Southeast Asia are introducing ACS in consumer finance markets, although—even with the significant concerns raised—there is an ongoing and concerning lag in oversight and regulation of the process. Regulation is vital to delivering big data and AI promises in the financial services market, while ensuring fairness and public interest. This article utilizes Vietnam, where the lending industry deploys ACS but in a situation of legal limbo, as a case-study to analyze the consequences of this technology. Vietnam is one of the foremost Southeast Asian countries in which ACS usage is spreading rapidly, and this provides an excellent opportunity to review the regulation, or lack thereof, and determine the implications that this may have for other countries that are currently introducing ACS in consumer finance markets. The article concludes with a proposal to regulate ACS in Vietnam based on international regulation and guidelines on ACS, data privacy, and AI to enable a transparent, accessible, and fair process.

This article examines the growth of algorithmic credit scoring and its implications for the regulation of consumer credit markets in the UK. It constructs a frame of analysis for the regulation of algorithmic credit scoring, bound by the core norms underpinning UK consumer credit and data protection regulation: allocative efficiency, distributional fairness and consumer privacy (as autonomy). Examining the normative trade-offs that arise within this frame, the article argues that existing data protection and consumer credit frameworks do not achieve an appropriate normative balance in the regulation of algorithmic credit scoring. In particular, the growing reliance on consumers’ personal data by lenders due to algorithmic credit scoring, coupled with the ineffectiveness of existing data protection remedies has created a data protection gap in consumer credit markets that presents a significant threat to consumer privacy and autonomy. The article makes recommendations for filling this gap through institutional and substantive regulatory reforms.