Data regulator launches inquiry into Ryanair’s online verification process

Ireland’s Data Protection Commission (DPC) has launched an inquiry into Ryanair’s use of facial recognition technology as part of its online customer verification process for bookings from third parties.

Ryanair launched its controversial policy of requiring biometric data from passengers who did not book directly through its website in 2023. This move caused “friction” and “frustrations” for business travellers using online booking tools or travel management companies to book the airline’s flights.

Following “numerous” complaints from passengers, the DPC has now announced an official inquiry into Ryanair’s policy to see whether it complies with the EU’s General Data Protection Regulation (GDPR).

Graham Doyle, the commission’s deputy commissioner, said: “The DPC has received numerous complaints from Ryanair customers across the EU/EEA who after booking their flights were subsequently required to undergo a verification process.

“The verification methods used by Ryanair included the use of facial recognition technology using customers’ biometric data. This inquiry will consider whether Ryanair’s use of its verification methods complies with the GDPR.”

The DPC’s move is a “cross-border” inquiry and it will “consider whether Ryanair has complied with its various obligations under the GDPR, including the lawfulness and transparency of the data processing”.

Earlier this year, trade body EU Travel Tech joined data protection authorities in France and Belgium in filing a complaint against Ryanair over the online verification process.

The budget carrier has previously stated that the verification process was implemented to avoid “unauthorised” online agents from selling flights and ancillary services at “inflated” prices.

Ryanair has signed several recent partnership deals with third parties, such as Travelfusion, Kyte and SAP Concur, to allow their customers to avoid the online customer verification process. The airline also rekindled its relationship with global distribution system Amadeus last year.

BTN Europe has contacted Ryanair for comment on the DPC’s decision to launch an inquiry into its biometric identification policy.