Skip to content
News·noyb - European Center for Digital RightsEN
Export

Want to book a Ryanair flight? Prepare for a face scan!

Biometric Data Today, noyb filed a GDPR complaint against Ryanair.

Full text

Biometric Data Today, noyb filed a GDPR complaint against Ryanair. Booking a flight on the airline’s website not only requires a mandatory account. New customers must also go through a verification process which, for many people, involves invasive biometrics. There is no reasonable justification for such a system. Instead, it appears that Ryanair is willingly violating its customers’ right to data protection in order to increase its market power. This is already the second noyb complaint against this practice. Despite a previous complaint, Ryanair has decided to force even more customers to go through its verification system. Complaint with the Italian Data Protection Authority (EN)Complaint with the Italian Data Protection Authority (IT)Previous noyb complaint against RyanairRyanair introduces ‘forced accounts’. Whoever wants to book a flight on the Ryanair website or app is forced to create a permanent account. This often means that data is combined and kept until you delete the acco

How it connects

RON 26,236 TIP TOP FOOD INDUSTRY SRL TIP TOP FOOD INDUSTRY SRL (controller) used a time-and-attendance and access-control system on its employees at its premise. This system was using personal data in the form of the… Romania ·ANSPDCP ·Art. 5, 9 Oct 1, 2026 Retention Period Types of Special Categories of Personal Data Integrity and Confidentiality Principle
€2.6M Croatian Gambling Operator The DPA initiated an ex officio investigation against a gambling operator (controller) regarding the identification and registration of players (data subjects) visiting its… Croatia ·AZOP ·Art. 4, 5, 6 +4 Oct 28, 2026 Personal Data Consent Biometric Data
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024 Biometric Data Storage Limitation Identification
C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Fairness & Transparency
C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Controllers Records of processing activities