On what legal basis may the employer process an employee's vehicle registration number?

ANSWER

According to PUODO, a vehicle registration number is classified as personal data within the meaning of the GDPR.

More on this in our blog article: /wiedza/blog/numery-rejestracyjne-to-takie-same-dane-osobowe-jak-numer-pesel

Recognising that vehicle registration numbers are personal data, the employer as data controller should consider processing those data on a legal basis listed in Article 6(1) GDPR. Processing may be based on Article 6(1)(a) GDPR (consent of the data subject) or Article 6(1)(f) GDPR (legitimate interests of the controller).

If choosing the first basis, it will be necessary to obtain consent from employees for that processing purpose. If using the legal basis under Article 6(1)(f) GDPR, a so-called balancing test will be appropriate.

More on this at: /wiedza/blog/jak-oceniac-czy-prawnie-uzasadniony-interes-administratora-jest-dopuszczalny-udostepniamy-wzor-testu-rownowagi

Whichever of the two indicated legal bases is chosen, the controller should remember the need to fulfil the information obligation under Article 13 GDPR.