GDPR Compliance in Rail Transport: Gender Identity Data as Unnecessary

In a recent judgment concerning data protection in the rail sector, the Court of Justice examined the necessity of collecting gender identity data when purchasing transport tickets. This case, involving the French railway company SNCF Connect, highlights critical aspects of GDPR compliance and the principles of data minimization. Core Issues: The French data protection authority, […]

Commission’s Data Sharing Practices with the US Challenged

Recent developments in data protection have seen the General Court ruling against the European Commission, highlighting the intricacies of data transfer regulations and their implications for EU institutions. In a landmark case, the General Court ordered the Commission to compensate an EU citizen for the unauthorized transfer of his personal data to the United States […]