Italy’s Data Protection Authority Fines ITA Airways and Alitalia €1.5 Million

Italy’s data protection authority has imposed a €1.5 million fine on ITA Airways and the former national carrier Alitalia over violations linked to the handling of passenger data.

The penalty follows an investigation by the country’s privacy regulator into how customer information was managed during the transition from Alitalia to ITA Airways. Authorities examined whether personal data belonging to passengers and loyalty program members was processed in compliance with data protection regulations.

Regulators determined that certain aspects of the data transfer and handling procedures did not fully meet required privacy standards. As a result, both airlines were fined for breaching rules governing the protection of personal information.

The transition from Alitalia to ITA Airways involved significant operational and structural changes, including the transfer of selected assets, systems, and customer databases to the new airline. Such transitions often require strict compliance with data protection laws, particularly in regions governed by the European Union’s General Data Protection Regulation (GDPR).

Data privacy has become an increasingly important issue for airlines and other travel companies, which routinely handle large volumes of personal information, including passenger identification details, contact information, and travel records.

Regulatory authorities across Europe have been intensifying oversight of how companies collect, store, and process personal data to ensure compliance with privacy laws.

The fine highlights the importance of maintaining strict data governance practices during corporate restructuring and operational transitions within the aviation industry.