Cybersecurity Policy Report, Ireland Opens Privacy Probe into Irish Airline, (Oct 4, 2024)
The Irish Data Protection Commission (DPC) today announced that it had opened an inquiry into Irish budget airline Ryanair’s processing of personal data for customers who book flights through third-party websites or online travel agents as part of its customer verification process.
The DPC has received customer complaints about Ryanair’s practice of requesting additional ID verification, which may include biometric data, from customers who book flights through third-party websites as opposed to booking directly through Ryanair, the DPC explained in a news release.
The DPC will consider whether Ryanair has complied with its data protection obligations under the European Union’s General Data Protection Regulation.
“The DPC has received numerous complaints from Ryanair customers across the EU/EEA who after booking their flights were subsequently required to undergo a verification process,” said Graham Doyle, the DPC’s deputy commissioner. “The verification methods used by Ryanair included the use of facial recognition technology using customers’ biometric data. This inquiry will consider whether Ryanair’s use of its verification methods complies with the GDPR.”
News: InternationalLegislation DataPrivacy GDPR