{"id":17875,"date":"2025-03-14T08:00:12","date_gmt":"2025-03-14T08:00:12","guid":{"rendered":"https:\/\/letslaw.es\/?p=17875"},"modified":"2025-03-04T16:56:03","modified_gmt":"2025-03-04T16:56:03","slug":"identidad-genero-no-es-dato-necesario-para-compra","status":"publish","type":"post","link":"https:\/\/letslaw.es\/en\/identidad-genero-no-es-dato-necesario-para-compra\/","title":{"rendered":"According to the CJEU, the gender identity of the customer is not a necessary piece of information for the purchase of a transport ticket"},"content":{"rendered":"

The Court of Justice of the European Union (CJEU) has issued a key judgment in Case C-394\/23, Mousse, which reinforces the principle of data minimisation within the framework of the General Data Protection Regulation (GDPR). In this decision, the CJEU established that <\/span>the obligation to indicate a term of courtesy based on gender identity for the purchase of a transport ticket is not objectively indispensable<\/b> and therefore does not comply with the requirements of the GDPR.<\/span><\/p>\n

This ruling has important implications for digital law and data protection, as it confirms that companies must limit the collection of personal information to the minimum necessary for the provision of a service. As <\/span>lawyers specialising in data protection<\/span><\/a> and intellectual property, we highlight the relevance of this decision in the regulation of data processing by companies and public administrations.<\/span><\/p>\n

Consumer data protection in transport<\/span><\/h2>\n

The GDPR requires that the processing of personal data must be adequate, relevant and limited to what is necessary for the purposes for which it is processed. In this case, the French railway company SNCF Connect required its customers to select a courtesy term (\u201cSir\u201d or \u201cMadam\u201d) when purchasing tickets online. The Mousse association challenged this practice before the French Commission Nationale de l\u2019Informatique et des Libert\u00e9s (CNIL), arguing that it violated the GDPR\u2019s data minimisation principle.<\/span><\/p>\n

The CJEU ruled that gender identification is not necessary for the purchase of a transport ticket and that <\/span>companies can use generic and inclusive terms of courtesy without affecting the provision of the service<\/b>. This ruling reinforces the obligation of companies to justify any collection of personal data and to avoid unnecessary processing that may generate discrimination based on gender identity.<\/span><\/p>\n

What does this mean for companies and public administrations?<\/span><\/h2>\n

For companies and public administrations, this decision implies the need to review their practices for collecting and processing personal data. Data protection lawyers recommend carrying out GDPR compliance audits and assessing whether the information requested from clients is strictly necessary for the provision of a service.<\/span><\/p>\n

The main implications of this ruling include:<\/span><\/p>\n