Spain’s data protection watchdog has fined Amadeus €14,4 million (R272,4 million) for allegedly using traveller data to build customer profiles and track booking histories and travel behaviour.
The case stems from an anonymous complaint filed in September 2023 and centres on a pilot programme that analysed passenger booking information collected through Amadeus’ global distribution system.
The Spanish Data Protection Agency (AEPD) alleges that Amadeus collected booking information from airline and hotel partners to create traveller profiles for a project that tracked booking histories and travel behaviour. The investigation found that passenger data dating back to 2019 had been used.
The AEPD identified two infringements: a lack of sufficient legal basis for the processing of passenger data, and a lack of information and transparency towards travellers.
The original fine was set at €18 million (R340,5 million). However, the amount was reduced to €14,4 million (R272,4 million) after Amadeus opted to make a voluntary payment. The group did not admit liability and, according to several reports, plans to contest the decision.
© Now Media. This content, including images, is protected by copyright and may not be copied, reused, adapted or republished without permission. If you would like to discuss content-sharing or cooperation opportunities, please contact: editor@travelnews.co.za.
