The Polish Data Protection Authority (UODO) has put a decisive stop to this common practice by imposing a fine of €4.3 million (PLN 18.4 million) on ING Bank Slaski. The ruling, dated July 23, 2025, makes it clear that even Anti-Money Laundering (AML) laws do not provide a “blank check” for the indiscriminate collection of … Read more
May the purchase of a ticket be tied to the mandatory provision of an email address or mobile number? In a recent judgment, the Higher Regional Court (OLG) of Frankfurt am Main held: no. This practice by Deutsche Bahn is unlawful because the data collection is not necessary for fulfilling the actual contract—the transport service … Read more
The Higher Administrative Court (OVG) Berlin‑Brandenburg has ruled on video surveillance in the Berlin S‑Bahn: No, not necessarily. This judgment (of May 13, 2025 – OVG 12 B 14/23) has far‑reaching significance for all companies that use video surveillance. The Case: Passenger Demands Video Copy of S‑Bahn Journey A passenger demanded that S‑Bahn Berlin GmbH … Read more
The European Court of Justice (ECJ) has ruled in case C-394/23 (Mousse) that requesting a customer’s gender when purchasing a train ticket online is not a necessary requirement for a railway company. This request violates the principle of data minimization under the General Data Protection Regulation (GDPR) in this case, highlighting that companies must limit … Read more
© Copyright 2021 mip Consult GmbH. All Rights Reserved.