On 9 November 2023, the Court of Justice of the European Union (CJEU) handed down its judgment in Case C‑319/22, Gesamtverband Autoteile-Handel eV v. Scania CV AB. The judgment highlights the nuanced nature of personal data, particularly in the context of Vehicle Identification Numbers (VINs). The decision further establishes that a requirement to give access to vehicle repair and maintenance information to independent operators under Regulation 2018/858 on the approval and market surveillance of motor vehicles and their components (the Market Surveillance Regulation) provides a valid legal basis for the processing of personal data under Article 6(1) of the General Data Protection Regulation (GDPR).

Read more in our Client Alert below.