Court of Justice judgment · Case C-394/23
Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect
- Case
- C-394/23
- Court
- Court of Justice
- Date of judgment
- 9 January 2025
- ECLI
- ECLI:EU:C:2025:2
- Instrument
- Regulation (EU) 2016/679 (GDPR)
- Provisions
- Article 5(1)(c), Article 6(1)(b), Article 6(1)(f), Article 21
Holding (summary, not the official text)
Making customers state a title (Mr or Ms) to buy a train ticket is not necessary for the contract and cannot rest on legitimate interest where customers were not told of that interest, the data are not strictly necessary, or the risk of discrimination outweighs it; the right to object does not change the necessity test.
Checked against the official source on 28 October 2026.
Only the judgment as published by the Court of Justice is authoritative. This is reference material, not legal advice.