Trainline.com - release of customer data to TOCs

[SouthStand]

After reading a few threads about trainline.com releasing customer data to a TOC, where do they stand in terms of data protection? I can understand them having to co-operate with the police, but to a TOC?

 

[SuspectUsual]

After reading a few threads about trainline.com releasing customer data to a TOC, where do they stand in terms of data protection? I can understand them having to co-operate with the police, but to a TOC?

It still comes under prevention / detection of crime

 

[island]

There was an extensive thread about this some months back but in summary it is all legitimate as it's covered by prevention and detection of crime, as well as Trainline's legitimate interests, and is flagged in their privacy statement.

 

[Hadders]

It’s perfectly legal to have a data sharing arrangement for the prevention and detection of crime.

My (non Railway) employer has several such agreements in place that allows us to share data with other organisations who we work with to prevent and detect crime.