Emirates Airline Fined €180,000 for Mishandling Passenger Health Data: Italy's Data Protection Authority Takes Action
Italy's data protection authority has imposed a fine of €180,000 on Emirates airline for allegedly mishandling the health data of passengers with reduced mobility. The authority received a complaint from a passenger who was asked to fill in a medical form despite not falling into the required categories. While the processing of health data was deemed lawful for ensuring safe transport, Emirates was found to have breached transparency and data storage limits. The airline failed to provide clear privacy information on its website or through staff assistance and retained health data collected via medical forms for an excessive seven-year period. Emirates has not yet commented on the matter.