DPO SchoolDPO School

Court of Justice judgment · Case C-394/23

Mousse v Commission nationale de l'informatique et des libertés (CNIL) and SNCF Connect

Reviewed by Sergio Maldonado Elvira on 29 October 2026

Case
C-394/23
Court
Court of Justice
Date of judgment
9 January 2025
ECLI
ECLI:EU:C:2025:2
Instrument
Regulation (EU) 2016/679 (GDPR)

Holding (summary, not the official text)

Making customers state a title (Mr or Ms) to buy a train ticket is not necessary for the contract and cannot rest on legitimate interest where customers were not told of that interest, the data are not strictly necessary, or the risk of discrimination outweighs it; the right to object does not change the necessity test.

Checked against the official source on 28 October 2026.

Only the judgment as published by the Court of Justice is authoritative. This is reference material, not legal advice.

All judgments