Ryanair Faces Privacy Complaint Over Biometric IDV

Europe-based privacy activist group NOYB has filed a formal complaint against Ryanair, accusing the airline of violating customers’ rights to data protection by using facial recognition technology to verify their identity when booking through online travel agents (OTAs).

The complaint, filed with Spain’s data protection agency on behalf of a traveler who booked a flight through eDreams ODIGEO, claims that Ryanair’s facial recognition requirement for travel agencies aims to gain an “unfair competitive advantage” over other booking channels. Ryanair defends its use of facial recognition, stating that travel agencies often fail to provide customer contact and payment details, leading to potential complications for travelers.

Ryanair, Europe’s biggest airline in terms of passenger numbers, explains on its website that passenger identity verification with travel agents is necessary for managing bookings and online check-ins while ensuring compliance with safety and security requirements. However, the airline does not impose the same verification process when booking directly through its website or mobile app.

NOYB asserts that there is no reasonable justification for Ryanair’s implementation of the facial recognition system and believes it infringes on customers’ data protection rights. The activist group challenges the airline’s verification procedures, arguing that they do not provide clear information about the purpose of the “intrusive process,” making them invalid under the General Data Protection Regulation (GDPR).

Ryanair’s spokesperson emphasizes that the verification process is intended to protect customers and ensure they are fully informed of safety and regulatory protocols when traveling, as legally required. The airline’s stance is that OTAs scrape its inventory and, in some cases, provide incorrect customer information and hidden mark-ups. Passengers who book through OTAs can choose between biometric verification and completing a digital verification form, both of which Ryanair claims are GDPR-compliant. NOYB has a history of launching privacy challenges under the GDPR against major multinational companies within the European Union.

Source: Irish Times

–

July 27, 2023 – by the FindBiometrics Editorial Team