Digital-only rail tickets should be forbidden
In a significant shift towards greater data privacy and consumer protection, Deutsche Bahn has announced that it will no longer require customers to provide their email address or mobile phone number when purchasing Sparpreis (SparTicket) tickets. This change, effective from December 15, 2024, comes in response to broader concerns about data collection practices and follows a court ruling that deemed such data demands as non-essential for ticket purchases.
The change in policy is not directly linked to a specific court ruling mandating this shift, but rather a response to increased public and legal scrutiny over Deutsche Bahn's data privacy practices. This scrutiny has been particularly focused on the use of tracking technologies in the DB Navigator app and the collection and sharing of customer data[1].
While a significant court case, filed by Digitalcourage and adjudicated by the Landgericht Frankfurt am Main, did examine the use of trackers in the DB Navigator app, it did not specifically address SparTicket data collection. Instead, the court considered whether the inclusion of trackers was technically necessary and consumer-friendly, given that they facilitated data sharing with third-party analytics companies[1].
The Higher Regional Court of Frankfurt has, however, ruled that Deutsche Bahn may not make SparTicket or SupersparTicket purchases dependent on customers providing personal data. This ruling is seen as a victory for consumer protection, with VZBV President Ramona Pop stating that forcing customers to disclose their data when buying a ticket is not acceptable[2].
In addition to this change, Deutsche Bahn continues to offer the opportunity for people without email addresses to purchase SparTickets anonymously. Customers can now receive a printout of their ticket at the counter without providing their data, following the Bahn's change in process.
Despite this, SparTickets are still not available at ticket machines. Deutsche Bahn recommends providing an email address for updates about track changes or delays, but private individuals cannot be forced to disclose their data for this purpose, according to the court.
The move towards greater data minimization and transparency in customer relations comes amidst criticism from the Economy Auditor General, who has criticized the federal government for the Bahn extending its general renovation to 2036[3]. The Federation of German Consumer Organizations (VZBV) has also successfully challenged Deutsche Bahn's previous practice of demanding personal data from customers when purchasing tickets at the counter, from October 2023 to the timetable change on December 15, 2024[2].
VZBV suggests that the Bahn should continue to offer simple, analog ticket options, reflecting a growing sentiment for more privacy-focused and consumer-friendly practices in the digital age.
[1] Source: https://www.heise.de/newsticker/meldung/Deutsche-Bahn-droht-mit-Ausweitung-der-Datenerhebung-5303374.html [2] Source: https://www.vzbv.de/presse/pressemitteilungen/2024/12/16/deutsche-bahn-muss-spartickets-anonym-verkaufen [3] Source: https://www.bundesrechnungshof.de/presse/pressemitteilungen/2023/12/14/bundesrechnungshof-kritisiert-verzoegerungen-bei-der-sanierung-der-bahn-infrastruktur
EC countries could consider implementing stricter regulations on data collection, particularly in the context of vocational training programs, to ensure the protection of student information. For instance, schools and training institutes could be discouraged from sharing student data with third-party analytics companies in the finance industry. In line with this, the finance industry might need to adapt to more privacy-focused practices when dealing with student data in vocational training institutions across EC countries.
