On June 10, 2025, the Finnish Data Protection Ombudsman ruled that processing personal data to enforce parking violations was unlawful because the rental agreement lacked provisions detailing such enforcement. This decision underscores the necessity for clear contract terms under both the General Data Protection Regulation (GDPR) and EU consumer laws, such as the Consumer Rights Directive and Unfair Commercial Practices Directive. Service providers must ensure that all enforcement mechanisms and data processing purposes are explicitly described in contracts to comply with legal requirements.
