The Irish Data Protection Commission announced on Friday that it had launched an investigation into Ryanair's unlawful use of facial recognition technology. The investigation will clarify whether the Irish airline's verification methods are compliant with the General Data Protection Regulation (GDPR).
The case concerns Ryanair's verification processes for customers who book flights through third-party websites or online travel agencies.
Ways of customer verification by Ryanair
The DPC explained that it had received a number of complaints about Ryanair's practice of requiring additional identity verification and that the verification methods included the use of facial recognition technology.
The investigation will examine whether Ryanair's use of verification methods complies with the General Data Protection Regulation (GDPR), including the lawfulness and transparency of data processing.
– DPC received numerous complaints from Ryanair customers across the EU/EEA who, after booking flights, were then required to go through a verification process. Ryanair's verification methods included the use of facial recognition technology using customers' biometric data, said Graham Doyle, deputy commissioner of the DPC.
Ryanair's position on the investigation
Referring to the matter, Ryanair said it welcomed the DPC investigationbecause its verification process protects customers from unauthorized online travel agencies (OTAs) that “provide false contact information and payment details to conceal the fact that they are overcharging and defrauding consumers.”
“Customers who book through these unauthorized OTAs are required to complete a simple verification process (biometric or digital), both of which are fully GDPR compliant,” a Ryanair spokesman said.
As the Irish station RTE explains, Ryanair offers three methods of identity verification to customers using external travel agencies. Express Verification uses facial recognition technology provided by an external company. Customers are asked to provide a photo of their travel documents, take a photo of their face to verify it matches their ID, and then complete the indicated steps on camera on their device. They are also asked to pay a fee of 59 euro cents to cover the cost of facial recognition technology, which Ryanair claims does not benefit.
Customers also have the option of standard verification, which may take up to seven days and involves sending a photo, a completed and signed verification form along with a photo of the customer's passport or ID card. The third option is to verify at the airport check-in desk at least two hours before departure.
Main photo source: Shutterstock