Ex ante, the July 2022 ruling by the Court of Justice of the EU (CJEU) on Passenger Name Records (PNR) had a very specific scope — the use of passenger name records by government agencies. Upon closer inspection, however, it has important implications for the governance of algorithms more generally. That is true especially for the proposed AI Act, which is currently working its way through the EU institutions.