Privacy organization noyb has filed a complaint about Ryanair with the Italian privacy regulator because of the facial scan that new customers must undergo. All customers who want to book a flight via the Ryanair website or app must create an account. This is a permanent account, says noyb. “This often involves combining and retaining data until you delete the account, which is usually never.”
The privacy organization notes that many other airlines do not require you to create an account. According to noyb, Ryanair’s ‘forced accounts’ violate the GDPR’s data minimization principle. This principle states that personal data should only be processed if necessary. “Ryanair does not meet this requirement,” Noyb said.
In addition to the mandatory account, new accounts must undergo a mandatory verification process. Here customers have two options, but noyb claims Ryanair nudges them to a pre-selected biometric facial scanning process to verify the account. “Despite the fact that biometric data is protected by European law,” noyb adds. If customers do not wish to undergo a facial scan, they must send a handwritten signature and a copy of their ID to Ryanair. According to noyb, this constitutes an additional burden for not giving permission for the use of biometric data. “As a result, customers are deprived of their free choice,” noyb further said.
Preventing online travel agencies from setting up accounts to buy Ryanair flights and sell them through their own websites appears to be the real purpose of the verification process, according to noyb. “When customers book their flights elsewhere, they do not spend extra money on hotels, insurance, airport transport or rental cars with Ryanair, but book these extra services with a travel agency,” adds noyb. The privacy organization wants the Italian regulator to force Ryanair to stop this method, to delete all data obtained in this way and to impose a fine.
In short:
| Key Points | Details |
|---|---|
| Complaint Filed | Privacy organization noyb has filed a complaint against Ryanair with the Italian regulator. |
| Mandatory Account Creation | New customers must create a permanent account to book flights, which noyb argues violates GDPR. |
| Facial Scan Verification | Customers are nudged towards a biometric facial scan for account verification, despite legal protections for biometric data. |
| Burden on Customers | Those refusing the facial scan must provide a handwritten signature and ID, limiting their choice. |
| Purpose of Verification Process | noyb claims the process aims to prevent online travel agencies from selling Ryanair flights, impacting customer options. |
