Spain fines Amadeus €14.4M over traveler profiling pilot
Spain's data protection authority AEPD has fined Amadeus IT Group €14.4 million over a pilot project that used passenger booking data from its GDS to profile travelers. The penalty was reduced from an initial €18 million after Amadeus made a voluntary payment without admitting liability. The investigation followed an anonymous complaint in September 2023. AEPD cited violations of GDPR Articles 14 and 6. Amadeus disagrees and plans to contest the fine in court.
Impact and considerations
This case highlights the importance of GDPR compliance in using traveler data, serving as a warning for companies engaging in profiling or analysis.
Key points
- Spain's AEPD fines Amadeus €14.4M for traveler profiling pilot.
- Penalty reduced from €18M after voluntary payment.
- AEPD cited violations of GDPR Articles 14 and 6.
- Amadeus disagrees and will contest the fine.
Sources and time
- Primary source
- PhocusWire / Phocuswright
- Other sources
- 0
- First source publication
- 28 May 2026, 02:10
- Page published
- 13 Aug 2026, 08:15
- Last updated
- 28 May 2026, 02:10
- Original links
- PhocusWire All News：Spain fines Amadeus €14.4M over traveler profiling pilot (opens in a new tab)Primary source · en · Published 28 May 2026, 02:10