Spain fines Amadeus €14.4M over traveler profiling pilot

Spain's data protection authority AEPD has fined Amadeus IT Group €14.4 million over a pilot project that used passenger booking data from its GDS to profile travelers. The penalty was reduced from an initial €18 million after Amadeus made a voluntary payment without admitting liability. The investigation followed an anonymous complaint in September 2023. AEPD cited violations of GDPR Articles 14 and 6. Amadeus disagrees and plans to contest the fine in court.