CJEU rules Latvian name-and-shame traffic violation legislation in breach of GDPR

The Court of Justice of the European Union (CJEU) has issued its judgment in Case C-439/19 Latvijas Republikas Saeima (Penalty points) ruling that General Data Protection Regulation (GDPR) precludes Latvian legislation that requires road safety authority to publish data on penalty points for traffic violations. The CJEU also found that such a system is not necessary in order to achieve the objective of improving road safety.