Data Protection

The Manual on Data Protection for Transport Undertakings (MDP) provides CIT members with an introduction to the general principles of data protection, as well as more detailed explanations on specific points of interest for transport undertakings. It includes the CIT Guidelines on Protection of Privacy and Processing of Personal Data used in International Passenger Traffic by Rail, the commentary to the articles of the GDPR with summaries of decisions and rulings and the answers to questions raised by CIT members, examples of “good practice” clauses and boilerplate contracts on data processing

Applicable with effect from 15 December 2019 / Edition 12 December 2021

133 pages

The Manual on Data Protection for Transport Undertakings (MDP) provides CIT members with an introduction to the general principles of data protection, as well as more detailed explanations on specific points of interest for transport undertakings. It includes the CIT Guidelines on Protection of Privacy and Processing of Personal Data used in International Passenger Traffic by Rail, the commentary to the articles of the GDPR with summaries of decisions and rulings and the answers to questions raised by CIT members, examples of “good practice” clauses and boilerplate contracts on data processing

Applicable with effect from 15 December 2019 / Edition 15 December 2019

92 pages

The Manual on Data Protection for Transport Undertakings (MDP) provides CIT members with an introduction to the general principles of data protection, as well as more detailed explanations on specific points of interest for transport undertakings. It includes the CIT Guidelines on Protection of Privacy and Processing of Personal Data used in International Passenger Traffic by Rail, the commentary to the articles of the GDPR with summaries of decisions and rulings and the answers to questions raised by CIT members, examples of “good practice” clauses and boilerplate contracts on data processing

Applicable with effect from 15 December 2019 / Edition 15 December 2019

92 pages

The present Guidelines are of recommendatory non-binding nature and are primarily designed for the CIT Members established in the European Union (EU) or offering services to natural persons in the EU. The Guidelines present an overview of the main notions and principles applicable to personal data protection and privacy in the EU as established by the Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Applicable with effect from 1 July 2019 / Edition 1 July 2019

54 pages

Appendix 1: CIT Model Data Processing Contract
Appendix 2: CIT Model Data Processing Contract, Appendix […] to the Agreement concluded on […]

The present Guidelines are of recommendatory non-binding nature and are primarily designed for the CIT Members established in the European Union (EU) or offering services to natural persons in the EU. The Guidelines present an overview of the main notions and principles applicable to personal data protection and privacy in the EU as established by the Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.

Applicable with effect from 1 October 2017 / Edition 1 October 2018

40 pages

Appendix 1: CIT Model Data Processing Contract
Appendix 2: CIT Model Data Processing Contract, Appendix […] to the Agreement concluded on […]

The two new boilerplate contrats for the processing of data and the point 11.4 of the GDP CIT were adopted by the CIV Committee in June 2018.

Applicable with effect 1 October 2017 / Edition 1st October 2018

40 pages

Appendix 1: CIT Model Data Processing Contract
Appendix 2: CIT Model Data Processing Contract, Appendix […] to the Agreement concluded on […]