The data may be publicly available, but GDPR still applies, AFIAK. https://www.technologylawdispatch.com/2019/04/privacy-data-protection/processing-publically-a

The data may be publicly available, but GDPR still applies, AFIAK. https://www.technologylawdispatch.com/2019/04/privacy-data-protection/processing-publically-available-personal-data-without-telling-data-subjects-the-polish-data-protection-authority-has-bad-news-for-you/ https://www.technologylawdispatch.com/2019/04/privacy-data-p... "The main takeaway is for companies that process personal data gathered from public sources to tread carefully. Be mindful of your GDPR article 14 notification obligations. Be sure you document your processing decisions, particularly if you decide not to inform affected individuals how you process their personal data. And most importantly, be prepared for regulatory scrutiny and engagement."