Neil Brown on Nostr: CJEU (C-394/23): GDPR and rail transport: a customer’s gender identity is not ...
CJEU (C-394/23):
GDPR and rail transport: a customer’s gender identity is not necessary data for the purchase of a transport ticket
An interesting case, as the French data protection authority, CNIL, which is usually quite robust, rejected the applicant's original complaint, finding that a train company requiring gender to buy tickets, so the company could personalise communications, was not an infringement of the GDPR.
Data minimisation ftw.
https://curia.europa.eu/juris/documents.jsf?num=C-394/23
#GDPR #gender
GDPR and rail transport: a customer’s gender identity is not necessary data for the purchase of a transport ticket
An interesting case, as the French data protection authority, CNIL, which is usually quite robust, rejected the applicant's original complaint, finding that a train company requiring gender to buy tickets, so the company could personalise communications, was not an infringement of the GDPR.
Data minimisation ftw.
https://curia.europa.eu/juris/documents.jsf?num=C-394/23
#GDPR #gender