Uncle Sam wants to know how big airlines use passenger data
(2024/03/22)
- Reference: 1711130407
- News link: https://www.theregister.co.uk/2024/03/22/data_privacy_airlines/
- Source link:
Ever suspected an airline was using your data to upsell, overcharge, target you with ads, or was selling it to third parties? Worried about how secure their systems are when you input that passport number? The US Department of Transportation is looking into it with a review of the country's ten biggest airlines.
The probe will look at air carriers' policies and procedures to determine if they are safeguarding personal info properly, unfairly or deceptively monetizing it, or sharing it with third parties, the agency said yesterday. If they're indeed doing anything "problematic," they can look forward to scrutiny, fines, and new rules, says the DOT.
"Airline passengers should have confidence that their personal information is not being shared improperly with third parties or mishandled by employees," said US Transportation Secretary Pete Buttigieg.
[1]
"This review of airline practices is the beginning of a new initiative by DOT to ensure airlines are being good stewards of sensitive passenger data."
[2]
[3]
The ten airlines going under the magnifying glass are Delta, United, American, Southwest, Alaska, JetBlue, Spirit, Frontier, Hawaiian and Allegiant.
It won't have escaped anyone's notice, though, that airlines flying to and from the United States already are obliged to share airline passenger name records (PNR) with the US Department of Homeland Security (DHS) – including names, telephone and credit card numbers, and more, soon after they've booked a flight. The hope would be that the government's system security is beyond reproach.
[4]
The idea of PNR is to screen folks with terrorist or criminal intent before the flight departs. US Customs and Border Control [5]says the PNR information it collects from airlines is audited, and protected with access controls, although it may be made available to other government agencies outside the DHS for law enforcement purposes pursuant to the "routine uses" under "applicable laws, regulations, DHS policies, and international agreements/arrangements."
It assures folks that data won't be shared outside of DHS "unless the recipient agency has a proper need to know the information and can ensure the information will be properly protected." So that's alright then.
[6]Google co-founder Brin named a defendant in wrongful death complaint
[7]Alaska Airlines' door-dropping flight was missing bolts
[8]Eurozone plans to formalize passenger data, improve security
[9]'It's like they took a rug and covered it up': Flight booking web app used by scores of airlines still vuln to attack – claim
Boeing, Boeing, gone. On a flight, we mean
This writer strongly suspects that, like me, you always check the model of airplane weeks before you travel, whether you're curious about seat configuration or just hoping you'll be lucky enough to get on a little propeller plane – like the prop hoppers in London City and regional Dutch airports. (Pro tip: If you have a few days to kill in Amsterdam and are a keen planespotter, you can take your binoculars to the picnic tables at the Loevesteinse Randweg McDonald's, just off the highway, and you can eyeball as many as you like without ever setting foot in Schiphol.) But for those who don't have [10]Flight Radar as a browser shortcut, a crowd of jokers has set up the website [11]Am I flying on a Boeing? following the [12]door plug blowout .
Before Europe-based readers start smiling smugly, by 2016 the EU had also adopted legislation requiring the transfer of PNR data by air carriers to authorities in the destination country, covering flights in and out of the EU, as well as intra-EU ones, although the latter has been a matter of [13]some dispute . Late in 2022, the EU conceived of a [14]central hub where all data will flow, with the aim of making data transfer smoother and safer – and which will not store details.
Besides looking into how commercial airlines deal with data, the US transport department is also looking at some other consumer rights, including a proposal to ban family seating junk fees and guarantee that parents can sit with their children for no extra charge when they fly, ruining the fun of TikTokers everywhere. Before last year, no US airline committed to guaranteeing fee-free family seating. Now, four of them do.
Another proposal in the works is to ensure "fee transparency" so that consumers know the cost of flying with a checked or carry-on bag and for changing or canceling a flight before they buy a ticket. ®
Get our [15]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://www.cbp.gov/travel/clearing-cbp/passenger-name-record
[6] https://www.theregister.com/2024/02/23/sergey_brin_wrongful_death_lawsuit/
[7] https://www.theregister.com/2024/02/07/alaska_airlines_doordropping_flight_lost_cvr/
[8] https://www.theregister.com/2022/12/20/europe_plans_to_standardize_passenger/
[9] https://www.theregister.com/2019/01/15/amadeus_security_hole/
[10] https://www.flightradar24.com/
[11] https://www.amiflyingonaboeing.com/
[12] https://www.theregister.com/2024/03/11/us_department_of_justice_boeing/
[13] https://www.atlanticcouncil.org/blogs/new-atlanticist/why-sharing-passenger-data-doesnt-fly-for-the-eus-top-court/
[14] https://www.theregister.com/2022/12/20/europe_plans_to_standardize_passenger/
[15] https://whitepapers.theregister.com/
The probe will look at air carriers' policies and procedures to determine if they are safeguarding personal info properly, unfairly or deceptively monetizing it, or sharing it with third parties, the agency said yesterday. If they're indeed doing anything "problematic," they can look forward to scrutiny, fines, and new rules, says the DOT.
"Airline passengers should have confidence that their personal information is not being shared improperly with third parties or mishandled by employees," said US Transportation Secretary Pete Buttigieg.
[1]
"This review of airline practices is the beginning of a new initiative by DOT to ensure airlines are being good stewards of sensitive passenger data."
[2]
[3]
The ten airlines going under the magnifying glass are Delta, United, American, Southwest, Alaska, JetBlue, Spirit, Frontier, Hawaiian and Allegiant.
It won't have escaped anyone's notice, though, that airlines flying to and from the United States already are obliged to share airline passenger name records (PNR) with the US Department of Homeland Security (DHS) – including names, telephone and credit card numbers, and more, soon after they've booked a flight. The hope would be that the government's system security is beyond reproach.
[4]
The idea of PNR is to screen folks with terrorist or criminal intent before the flight departs. US Customs and Border Control [5]says the PNR information it collects from airlines is audited, and protected with access controls, although it may be made available to other government agencies outside the DHS for law enforcement purposes pursuant to the "routine uses" under "applicable laws, regulations, DHS policies, and international agreements/arrangements."
It assures folks that data won't be shared outside of DHS "unless the recipient agency has a proper need to know the information and can ensure the information will be properly protected." So that's alright then.
[6]Google co-founder Brin named a defendant in wrongful death complaint
[7]Alaska Airlines' door-dropping flight was missing bolts
[8]Eurozone plans to formalize passenger data, improve security
[9]'It's like they took a rug and covered it up': Flight booking web app used by scores of airlines still vuln to attack – claim
Boeing, Boeing, gone. On a flight, we mean
This writer strongly suspects that, like me, you always check the model of airplane weeks before you travel, whether you're curious about seat configuration or just hoping you'll be lucky enough to get on a little propeller plane – like the prop hoppers in London City and regional Dutch airports. (Pro tip: If you have a few days to kill in Amsterdam and are a keen planespotter, you can take your binoculars to the picnic tables at the Loevesteinse Randweg McDonald's, just off the highway, and you can eyeball as many as you like without ever setting foot in Schiphol.) But for those who don't have [10]Flight Radar as a browser shortcut, a crowd of jokers has set up the website [11]Am I flying on a Boeing? following the [12]door plug blowout .
Before Europe-based readers start smiling smugly, by 2016 the EU had also adopted legislation requiring the transfer of PNR data by air carriers to authorities in the destination country, covering flights in and out of the EU, as well as intra-EU ones, although the latter has been a matter of [13]some dispute . Late in 2022, the EU conceived of a [14]central hub where all data will flow, with the aim of making data transfer smoother and safer – and which will not store details.
Besides looking into how commercial airlines deal with data, the US transport department is also looking at some other consumer rights, including a proposal to ban family seating junk fees and guarantee that parents can sit with their children for no extra charge when they fly, ruining the fun of TikTokers everywhere. Before last year, no US airline committed to guaranteeing fee-free family seating. Now, four of them do.
Another proposal in the works is to ensure "fee transparency" so that consumers know the cost of flying with a checked or carry-on bag and for changing or canceling a flight before they buy a ticket. ®
Get our [15]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/databases&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44Zf4NivXVYeECSkMi2Pw3gQAAAAU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://www.cbp.gov/travel/clearing-cbp/passenger-name-record
[6] https://www.theregister.com/2024/02/23/sergey_brin_wrongful_death_lawsuit/
[7] https://www.theregister.com/2024/02/07/alaska_airlines_doordropping_flight_lost_cvr/
[8] https://www.theregister.com/2022/12/20/europe_plans_to_standardize_passenger/
[9] https://www.theregister.com/2019/01/15/amadeus_security_hole/
[10] https://www.flightradar24.com/
[11] https://www.amiflyingonaboeing.com/
[12] https://www.theregister.com/2024/03/11/us_department_of_justice_boeing/
[13] https://www.atlanticcouncil.org/blogs/new-atlanticist/why-sharing-passenger-data-doesnt-fly-for-the-eus-top-court/
[14] https://www.theregister.com/2022/12/20/europe_plans_to_standardize_passenger/
[15] https://whitepapers.theregister.com/
Anonymous Coward
They can start by banning use of facial recognition at the gate. There is no justification. The claim that it is faster and more accurate are complete tosh.
Even domestic flights...
aussie-alan
Every single PNR on a US domestic flight is also sent to the Department of Homeland Security, as the airline cannot print a boarding pass for you until DHS approves it. Prior to 9/11, various agencies would send watch lists to the airlines who then had to put it into their systems, but now it is all centralized.
Frequent Flyer data is jealously guarded by the major carriers, they often won't even share it with other departments at their own airline. They make way too much money flogging credit cards and selling miles, and won't share their database.
My background - I worked in travel IT, primarily airlines, for the last 35+ years.
A.
Re: Even domestic flights...
O RLY
What do you think of the argument that airlines are banks whose side job is transportation?
Same article, one paywalled.
https://www.theatlantic.com/ideas/archive/2023/09/airlines-banks-mileage-programs/675374/
https://www.msn.com/en-us/travel/news/airlines-are-just-banks-now/ar-AA1h34ex
First place I heard this argued:
https://www.youtube.com/watch?v=ggUduBmvQ_4
I'm just a layman who used to be a frequent flyer prior to March 2020.
I'd love to do a similar review on how the US adminstration and agencies are using the passenger records and other data it gets from Europe. Alas, no way any non US organization will have a chance to get them to show what they do with that data and verify it is only used to keep everyone safe.