top of page
With the contribution of the LIFE programme of the European Union - LIFE14 ENV/GR/000611

GDPR: how will the new data protection law affect the transport sector?

As Europe’s General Data Protection Regulations (GDPR) comes into force, organisations across all industries have questions about what exactly it means for them. Transport is only getting smarter and that is dependent on making the most of personal data. And, it works both ways. While transport companies can use personal data to monitor and tailor what they offer to each individual, customers can also personalise their own travel options – through online booking, downloading apps and ‘favouriting’ destinations or journeys.

If businesses don’t comply with GDPR, they’ll be open to enforcement action – which could damage reputations as well as bank balances across Europe. If GDPR is breached – whether intentionally or accidentally – in certain circumstances it must be reported to the Information Commissioner’s Office (ICO) and potentially to the individuals whose data has been breached. If not, businesses are opening themselves up to two fines: one for not reporting the breach, the other for the breach itself.

There are several handy tools that can help businesses get GDPR compliance right.  Firstly, the ICO has developed an entire section on understanding GDPR – with a dedicated advice line, as well as a ‘12 steps to take now’. The ICO has also developed a ‘lawful basis’ tool to give businesses tailored guidance on which legal basis is likely to be most appropriate for the data processing that they undertake.

For more information click here 


The LIFE GYM [LIFE14 ENV/GR/000611] project is co-funded by the LIFE programme, the EU financial instrument for the environment.


The sole responsibility for the content of this report lies with the authors. It does not necessarily reflect the opinion of the European Union. Neither the EASME nor the European Commission are responsible for any use that may be made of the information contained therein.


Start Date: 15 September 2015 – Duration: 35 months

bottom of page