Unauthorized Messenger usage, permanent video surveillance and continuous tracking are increasingly putting taxi companies in conflict with the GDPR. Recent rulings and regulatory proceedings show where the risks lie and which measures are now necessary.