noyb lodged a complaint with Spain's Data Protection Authority (AEPD) alleging that Ryanair forces customers who book via online travel agents to undergo a facial‑recognition verification process. The complaint argues that Ryanair lacks a valid legal basis, that consent is not informed, and that the practice may breach GDPR provisions on biometric data. The AEPD could impose a fine of up to €192 million based on Ryanair’s 2022 turnover.
Why it matters: The case highlights potential GDPR violations from Ryanair’s use of biometric facial‑recognition for customers booking through third‑party agents.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
