Tech News : Ryanair Third-Party Data Protection Inquiry

What happens to data gathered as part of Ryanair’s extra ID verification requirement (from customers who don’t book directly through its website), has led to an inquiry being launched by Ireland’s Data Protection Commission (DPC).

Why ID Verification? 

For travellers booking flights through third-party websites or online travel agents (OTA), rather than directly through Ryanair, the Irish low-cost airline requires them to complete a Customer Verification Process. The reason, given by Ryanair, is that third-party agents sometimes provide incorrect or incomplete passenger information, e.g. fake contact or payment details, which can interfere with Ryanair’s ability to communicate important flight details directly to passengers.

Also, Ryanair has long opposed OTAs and third-party websites that sell its tickets without permission, often through “screen scraping” techniques. This practice involves OTAs gathering flight data from Ryanair’s website and reselling tickets, sometimes at inflated prices. Ryanair argues that this is what leads to the incorrect information being given to it, and to poor customer experiences. For example, in July 2024, a US court ruled against Booking.com in a screen-scraping case, reinforcing Ryanair’s stance. The airline, therefore, urges customers to book directly through its site to avoid such issues and ensure proper communication and service.

What Type of ID Verification Does Ryanair Require? 

Ryanair offers travellers two verification options when they attempt to book flights through OTAs and third-party websites. These are:

– Express verification. This (faster option) actually uses facial recognition technology to confirm the traveller’s identity. It costs around €/£0.59 and can be completed in a few minutes with the use of a passport or national ID and a device with a camera.

– Standard Verification. This is the free alternative where travellers submit a signed customer verification form along with their ID. However, this method can take up to seven days to process, so it’s not ideal for last-minute bookings.

Why The DPC Inquiry? 

It seems, however, that aspects of Ryanair’s ID verification requirement have led to scrutiny, particularly concerning the use of facial recognition and compliance with GDPR regulations.

On October 4, Ireland’s DPC announced that it had opened an inquiry into Ryanair’s processing of personal data as part of the Customer Verification Processes in question. Graham Doyle, Deputy Commissioner with the DPC commented: “The DPC has received numerous complaints from Ryanair customers across the EU/EEA who after booking their flights were subsequently required to undergo a verification process. The verification methods used by Ryanair included the use of facial recognition technology using customers’ biometric data. This inquiry will consider whether Ryanair’s use of its verification methods complies with the GDPR.” 

Data Processing  

The DPC said the decision to conduct the inquiry under Section 110 of the Data Protection Act 2018[2], taken by the Commissioners for Data Protection, Dr. Des Hogan and Dale Sunderland, “was notified to Ryanair earlier this week”. The DPC has also said the inquiry is “cross-border [3] in nature” (reportedly, with one other country) and “will consider whether Ryanair has complied with its various obligations under the GDPR, including the lawfulness and transparency of the data processing”. 

Considering Ryanair is an international airline, it’s perhaps not surprising that there’s a cross-border nature to the inquiry. Looking at the wider meaning of DPC’s statement about the inquiry, it looks likely that it will assess whether Ryanair’s data processing practices comply with the GDPR, particularly focusing on key areas like lawfulness (whether Ryanair had a legitimate basis to collect and use passengers’ data) and transparency (whether passengers were adequately informed about how their data would be used). This scrutiny is often triggered when there are concerns over how personal data, including sensitive information such as biometric data, is handled, especially given Ryanair’s use of facial recognition technology during its verification process.

What Does Ryanair Say? 

A Ryanair spokesperson has been (widely) quoted as saying: “We welcome this DPC inquiry into our Booking Verification process, which protects customers from those few remaining non-approved OTAs, who provide fake customer contact and payment details to cover up the fact that they are overcharging and scamming consumers. 

“Customers who book through these unauthorised OTAs are required to complete a simple verification process (either biometric or a digital verification form) both of which fully comply with GDPR. This verification ensures that these passengers make the necessary security declarations and receive directly all safety and regulatory protocols required when travelling, as legally required.” 

What Does This Mean For Your Business? 

The inquiry into Ryanair’s third-party booking verification process not only places the airline under scrutiny but also raises significant questions for the wider aviation industry. As data protection laws like the GDPR continue to evolve, airlines worldwide must carefully consider how they collect, process, and store customer data, particularly when it comes to sensitive biometric information. It’s worth remembering that this case relates to the use of acial recognition just at the booking stage, not at passport control, and with the DPC examining whether Ryanair’s use of facial recognition and other data practices comply with GDPR, this case could set a precedent that impacts other airlines, potentially forcing them to reassess their own data handling processes to avoid similar regulatory challenges.

For Ryanair’s competitors, should the DPC find Ryanair’s practices in breach of GDPR, it might prompt a broader review of data collection methods across the industry. Airlines that rely on similar verification processes, or those planning to introduce biometric solutions, may need to quickly adapt to ensure compliance. On the other hand, airlines with more traditional booking and verification systems could use this moment to differentiate themselves by emphasising stronger privacy protections and more transparent data use.

From a customer perspective, the inquiry highlights growing concerns about privacy and the use of personal data in an increasingly digital world. As biometric technology becomes more common in verification and security processes, passengers are becoming more aware of how their data is used and protected. Trust, transparency, and a clear explanation of how personal data is processed may become critical factors in how customers choose which airline to fly with. Airlines that successfully balance security with privacy may gain a competitive advantage, particularly in an industry where reputation and customer loyalty are so crucial.

Ultimately, the outcome of this inquiry may have some far-reaching consequences, not only for Ryanair but for the aviation sector as a whole. This case is a reminder that data protection is now a key pillar of operational strategy, and one that cannot be overlooked in the drive to enhance customer security and streamline digital processes. The industry will be watching closely to see how Ryanair navigates these regulatory waters and what this means for the future of data handling in the aviation world.

An Apple Byte : Apple in Workers’ Rights Dispute

The U.S. National Labour Relations Board (NLRB) has accused Apple of restricting employees’ rights to advocate for better conditions by limiting their use of social media and Slack and retaliating against those who raised concerns.

The NLRB’s allegations, filed this month, focus on Apple’s work rules regarding Slack and social media use. Apple, which introduced Slack to its employees several years ago, saw the platform grow as a key tool for workers to discuss workplace concerns, particularly during the COVID-19 pandemic. However, the NLRB says that Apple has since imposed restrictions on how workers can use the platform, undermining their ability to freely advocate for better working conditions.

The NLRB claims that Apple maintained illegal policies, including restricting the creation of new Slack channels without management’s approval and requiring employees to report workplace concerns directly to a manager or designated support team. The complaint also includes accusations of Apple sacking an employee for workplace activism and pressuring another to delete a social media post, actions which the NLRB claims violate labour laws.

The complaint is part of a broader pattern, with Apple facing a similar NLRB complaint just a week earlier, accusing it of enforcing overly broad confidentiality, nondisclosure, and noncompete agreements that limited workers’ rights. In both cases, Apple has denied the accusations. An Apple spokesperson is reported as saying that Apple is committed to providing “a positive and inclusive workplace”, takes employee concerns seriously, and strongly disagrees with the NLRB’s claims.

The current case stems from a 2021 complaint filed by former Apple employee Janneke Parrish, who claims she was sacked in retaliation for her role in workplace activism. Parrish had used Slack and social media to organise efforts around remote work, pay equity, and discrimination at Apple. Parrish’s lawyer argues that Apple engaged in “extensive violations” of workers’ rights, asserting that employees were punished for raising critical workplace issues, particularly around gender and racial discrimination.

If Apple and the NLRB can’t reach a settlement on the matter, it looks likely that the case will go to a hearing before an administrative judge in February. The outcome of the hearing could set a significant precedent for the rights of employees in the tech industry, with broader implications for how companies handle worker communication and activism.

Security Stop Press : China-Backed Hackers Breach Telecoms Wiretap Systems

China-backed hackers have breached the wiretap systems of several major U.S. telecom and internet providers, exposing critical vulnerabilities and likely collecting vast amounts of internet traffic to gather intelligence on Americans.

These wiretap systems, required by the 1994 Communications Assistance for Law Enforcement Act (CALEA), grant authorised personnel (e.g. law enforcement agencies) almost unfettered access to user data, including internet traffic and browsing histories. However, these systems have long been viewed as security risks, with experts warning of their potential misuse. For example, Georgetown Law professor Matt Blaze called the breach “inevitable,” highlighting the inherent dangers of building backdoors meant for lawful purposes, which are prone to exploitation by malicious actors.

The Wall Street Journal recently reported that the hacking group, known as ‘Salt Typhoon’, breached at least three of the largest U.S. providers – AT&T, Lumen, and Verizon – to access these systems. While the full extent of the damage remains unclear, some US national security sources have described the breach as potentially catastrophic. The hackers are thought to be positioning for future cyberattacks, possibly as part of tensions between the U.S. and China over Taiwan. The breach has reignited debate over the risks of government-mandated backdoors, with experts like Stanford’s Riana Pfefferkorn pointing out that such systems “jeopardise” rather than protect users.

The revelations come amidst growing global concern over government backdoors and encryption, with other countries, including those in the EU, also considering legislation that could weaken digital security. Signal president Meredith Whittaker echoed warnings that “there’s no way to build a backdoor that only the ‘good guys’ can use,” underscoring the wider implications of the breach.

To guard against the risk of such attacks, the advice for businesses is to use strong encryption, limit data access to the minimum necessary personnel, and continuously review and update security practices to close potential vulnerabilities in systems.

Sustainability-in-Tech : AI-Designed Bacteria Creates Rubber Alternative

Paris-based biotech startup BaCta, which has just secured €3.3 million in funding, produces natural rubber using genetically engineered bacteria, thereby offering a sustainable alternative to traditional rubber sources and synthetic, petroleum-based versions.

What’s The Problem With How We Get Rubber Now? 

The current methods of rubber production present several significant environmental and sustainability issues. Synthetic rubber, which makes up about half of the global supply, is derived from petroleum-based chemicals. This process is highly energy-intensive and contributes heavily to CO2 emissions, exacerbating climate change. Also, synthetic rubber is non-biodegradable, meaning it persists in the environment, adding to the growing issue of plastic waste pollution.

Natural rubber, sourced from Hevea trees, is also not without its problems. While it may seem more environmentally friendly, the growing demand for rubber has driven deforestation in tropical regions, where land is cleared for plantations. This not only destroys vital ecosystems and reduces biodiversity but also releases significant amounts of carbon stored in trees and soil, further worsening climate change. Also, these rubber plantations are typically monocultures, which can degrade soil health and make crops more vulnerable to pests and disease.

Both forms of rubber production are under increasing pressure as manufacturers face stricter emissions regulations. The deforestation linked to natural rubber and the reliance on petrochemicals for synthetic rubber are incompatible with global sustainability goals. The industry also often suffers from supply chain instability, compounded by climate change and socio-political issues in rubber-producing regions.

Factors such as these have led to growing interest in alternatives like BaCta’s bioengineered rubber, which aims to offer a carbon-neutral, renewable solution that mitigates the environmental and ethical concerns associated with traditional rubber production.

How Does BaCta Make Rubber From Bacteria? 

BaCta produces rubber using genetically engineered bacteria, specifically Escherichia coli. The process begins by feeding these bacteria a renewable feedstock, such as glucose, acetate, or even carbon directly captured from the atmosphere. Inside the bacteria, AI-designed enzymes transform the carbon source into isoprene, the key building block of rubber. The bacteria then polymerise the isoprene into natural rubber through a unique synthetic pathway. The resulting synthetic rubber is then extracted and purified. This method allows BaCta to create high-quality, carbon-neutral rubber without the environmental downsides of traditional methods, such as deforestation or petrochemical dependence.

Benefits 

BaCta’s synthetic rubber offers several key benefits. For example:

– Carbon neutrality. The production process is designed to be carbon-neutral, and potentially even carbon-negative, significantly reducing the carbon footprint compared to traditional rubber production. BaCta says on its website that not using traditional rubber could mean, “More than 500 million tons eqCO2 could be removed every year”.

– It uses renewable feedstock. BaCta uses renewable sources like glucose, acetate, and carbon in its synthetic rubber production, thereby avoiding reliance on petroleum (used in synthetic rubber) or deforestation (linked to natural rubber).

– It’s hypoallergenic. By engineering the bacteria to remove specific proteins found in natural rubber (sap), BaCta’s rubber can be hypoallergenic, reducing the risk of allergic reactions.

– It’s sustainable. The process avoids the environmental issues of deforestation and land degradation associated with rubber plantations, making it a more sustainable option.

– It’s high quality. BaCta says its material is, “Superior quality Long chain, ultra-low impurity content, hypoallergenic rubber”. 

– Cost competitiveness. BaCta aims to produce rubber at a price point that’s competitive with conventional rubber (at a “fixed price, no fluctuation, no uncertainty”), while delivering environmental benefits.

Has A Functioning ‘Proof of Concept’ 

BaCta has moved beyond the conceptual stage and already has a functioning proof of concept (PoC) for producing natural rubber using the engineered bacteria. That said, although company has successfully demonstrated the process in the lab, it is still in the early stages of scaling up production. Currently, BaCta is working on increasing its output, aiming to move from laboratory-scale production (milligrams of rubber) to industrial levels, with the next step being a pilot-scale operation involving larger fermenters.

Funding 

The company recently secured €3.3 million in funding from investors including OVNI Capital, Kima Ventures, and several business angels. This funding is intended to support the scale-up process, helping BaCta transition from producing small batches to larger quantities needed for commercial use.

Rubber For What?

Initially, BaCta plans to start by targeting the luxury fashion industry, e.g. for use in the manufacture of premium shoes and bags, which requires smaller amounts of high-quality rubber, before expanding into more industrial applications.

What Does This Mean For Your Organisation? 

BaCta’s innovative approach to rubber production could have far-reaching implications for the many industries that rely heavily on rubber. From automotive manufacturers, which use rubber for tyres, seals, and various components, to healthcare sectors that depend on rubber for gloves, tubing, and other essential products, the potential applications of BaCta’s sustainable rubber are vast. Although BaCta’s initial target is businesses in the fashion industry, by providing a carbon-neutral, renewable alternative to traditional rubber, BaCta can potentially offer businesses in many industries a chance to significantly reduce their environmental impact. This is especially important as industries face mounting pressure to meet stringent emissions regulations and consumer demand for sustainable products.

For businesses, switching to BaCta’s bioengineered rubber could mean not only reducing their carbon footprints but also gaining a competitive edge in a marketplace that increasingly values eco-friendly practices. With its ability to produce hypoallergenic, high-quality rubber that is cost-competitive with traditional options, BaCta’s product could easily replace conventional rubber without sacrificing performance or cost efficiency. Also, as supply chain disruptions and resource scarcity become more prevalent due to climate change, BaCta’s method, which bypasses the need for deforestation and petrochemicals, presents a more stable and sustainable alternative.

As BaCta scales up its production, it could also help businesses mitigate the risks associated with the volatility of traditional rubber supply chains, which are often subject to geopolitical tensions and environmental degradation. If widely adopted, this new form of rubber could lead to a significant reduction in global CO2 emissions and deforestation, offering industries a pathway to sustainable growth while aligning with global climate goals. BaCta’s synthetic rubber could, therefore, reshape the future of rubber-reliant industries, making sustainability a reality.

Tech Tip – Use “Virtual Keyboard” for On-Screen Typing

The Virtual Keyboard can be a lifesaver if your physical keyboard is malfunctioning or unavailable, allowing you to type directly on the screen with your mouse or touchscreen. Here’s how to access it:

To Enable the Virtual Keyboard

– Press Win + S and type ‘On-Screen Keyboard’, then select the app from the search results.

Use the Virtual Keyboard

– A keyboard will appear on your screen, allowing you to type using your mouse or by tapping the screen (if your device is touchscreen-enabled).

– This feature is helpful when you’re working remotely or troubleshooting hardware issues.

Each week we bring you the latest tech news and tips that may relate to your business, re-written in an techy free style. 

Archives