Parliament v Council: When Passenger Data Becomes a Security Measure
In Parliament v Council, the CJEU struck down the EU-U.S. PNR framework because Directive 95/46 could not govern passenger-data transfers for public-security and law-enforcement purposes. The case shows why the purpose of processing can determine the applicable legal framework.