NOYB files GDPR complaint against Ryanair

19/12/2024 | NOYB

Austrian privacy and digital rights advocacy group NOYB has filed a complaint with the Italian data protection authority (Garante) against Ryanair over the booking and verification process the airline requires of its customers. According to NOYB, Ryanair forces customers to create a permanent account, violating Article 5(1)(c) of the EU General Data Protection Regulation (GDPR), which requires that personal data should only be processed if it is necessary. In addition, the company enforces a mandatory verification process, nudging passengers towards a pre-selected and highly invasive biometric facial recognition process. Customers can send a handwritten signature and a copy of their government ID. NOYB argues that such practices violate the purpose limitation principle under Article 5(1)(b) GDPR and fails to meet the consent requirements in accordance with Articles 6 and 9 GDPR. NOYB is asking the Garante to issue a fine of up to €431 million based on the company's €10 billion turnover.

Read Full Story
Ryanair

What is this page?

You are reading a summary article on the Privacy Newsfeed, a free resource for DPOs and other professionals with privacy or data protection responsibilities helping them stay informed of industry news all in one place. The information here is a brief snippet relating to a single piece of original content or several articles about a common topic or thread. The main contributor is listed in the top left-hand corner, just beneath the article title.

The Privacy Newsfeed monitors over 300 global publications, of which more than 5,750 summary articles have been posted to the online archive dating back to the beginning of 2020. A weekly roundup is available by email every Friday.

Freevacy has been shortlisted in the Best Educator category.
The PICCASO Privacy Awards recognise the people making an outstanding contribution to this dynamic and fast-growing sector.