GDPR and senior transport: protecting passengers' data in practice
28. 7. 2026
Senior transport means carrying people whose name, address and phone number you keep on file — often with a note such as "walking frame, needs help boarding". That is personal data, and where health is concerned it falls into a special category. The GDPR therefore applies to you. None of it, however, is beyond an ordinary operation.
What you need to have in order
A lawful basis for processing. The client you keep on file should know what data you hold about them and why. With enquiries from a website it is normal to have a consent checkbox on the form itself.
Purpose and proportionality. Keep only what you need to run the service — name, contact, addresses and a note about the ride. Do not collect data "just in case".
Security. Data should be stored safely: access only over an encrypted connection, passwords held using a modern method, regular backups. A paper notebook of passengers' addresses lying on a desk is, from this point of view, worse than a properly secured system.
Who gets to see what
Not everybody in the organisation needs to see everything. A driver manages with the details of their own ride, the dispatcher sees the operation, and management or the funding body can have a read-only role. It is useful to be able to hide contact details — phone numbers and notes — from people who do not need them for their work.
Passing data on, and the processing agreement
When somebody else runs the service for a municipality — a taxi company, say — they process the data on the municipality's behalf. That calls for a data processing agreement setting out who is responsible for what. Having one ready saves arguments later.
What helps in practice
- An audit trail — for sensitive operations it is traceable who did
what and when. Useful not only for the GDPR but for peace of mind in the team.
- Automatic deletion — data that is no longer needed (old call
records, for instance) should disappear by itself after a while.
- Knowing where the server is — data that does not travel to
unexpected places is simply easier to govern.
The GDPR in senior transport is not a bogeyman. If from the start you keep only what is necessary, secure it, and know who can see what, you are done — and above all you are protecting people who trust you.
Want an operation where roles, hidden contacts, an audit trail and backups come as standard? Take a look at the demo.
Running a taxi or senior transport service? Send us a no-obligation enquiry or try the demo.