EU privacy concerns on airline passenger data could cause rift with U.S.
An EU commissioner warned that U.S. antiterror efforts could breach European privacy laws
Computerworld - The European Commission this week warned that a trans-Atlantic row may soon result if U.S. demands for airlines to reveal passenger information as an antiterror measure aren't backed by adequate privacy safeguards.
In a letter to Secretary of Homeland Security Tom Ridge, the European Union commissioner in charge of customs issues, Frits Bolkestein, said that only a "tightly worded undertaking" about the manner in which passenger information is handled and shared is acceptable.
"Data protection authorities here take the view that [passenger] data is flowing to the U.S. in breach of our Data Protection Directive," Bolkestein said in his letter. "It is thus urgent to establish a framework which is more legally secure."
The letter was originally sent to Ridge in June but was released to journalists this week after a meeting on the topic by European Commission representatives, who said they hadn't won any significant concessions from the U.S. so far.
Discussions on the issue have been ongoing since December 2001, soon after the U.S. began requiring all airlines flying into the country to disclose the Passenger Name Record (PNR) of all passengers. PNR information typically includes names, travel routes, credit card numbers, special meals and other details, which U.S. authorities said they would need to identify potential terrorists entering the country.
The European Commission has been insisting on adequate privacy safeguards relating to the manner in which the data can be accessed and used by U.S. authorities. The privacy issues being raised are similar to the ones that U.S. businesses need to comply with when doing business in Europe.
The concerns relate to issues such as the purpose for which the data is used, stronger protection, filtering out of certain types of data and the need for a redress mechanism in cases where mistakes are made.
Nevertheless, under an interim agreement between the two sides, U.S. customs and immigration authorities have been accessing such information from European airlines since March.
"On a number of important points the U.S. undertakings fall short of what we need and it is urgent that these issues now be looked at from a political perspective," Bolkestein's letter said. Otherwise, there could be a "highly charged Trans-Atlantic confrontation" over the issue, he said.
Read more about Privacy in Computerworld's Privacy Topic Center.



- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Overcome Top 7 Admin Challenges of Active Directory
- As Active Directory's role in the enterprise has drastically increased, so has the need to secure the data. Gain insight on creating repeatable,...
- Insiders Can Ruin Your Company. Take Action.
- Did you know that 80 percent of threats to an organization come from the inside? The threat from insiders is often overlooked in...
- Top Solutions and Tools to Prevent Devastating Malware
- Custom malware frequently goes undetected. According to Forrester Research, the best way to reduce risk of breach is to deploy file integrity monitoring...
- Streamline Compliance and Increase ROI
- Streamline, simplify, and automate compliance related activities; especially those that impact multiple business units. This white paper from NetIQ, outlines solutions that will...
- X-Ray of the PCI Process-4 Proactive Steps
- This white paper from Forrester Research Inc., helps break PCI into understandable components. Security and risk professionals will gain knowledge and insight into... All Privacy White Papers
- A Road Map for Best Practice Social Media Acceptable Use Policy
- Organizations around the world are racing to leverage the power of social media for business. Sites like Facebook are used for marketing, human...
- Data Protection and Disaster Recovery with iSCSI and VMware
- Get this on demand webcast now
- Optimizing Networks for the Cloud
- Join guest speaker, Rohit Mehra, IDC Director of Enterprise Communications Infrastructure, to explore current trends, discuss best practices for optimizing Data Center and...
- Apps QuickStart Series Part 2: Designing and Deploying SQL Server on VMware vSphere
- Download this webcast to learn about the design considerations for virtualizing SQL workloads, performance and scalability information and high-availability options, as well as...
- Apps QuickStart Series Part 1: Designing and Deploying Exchange 2010 on VMware vSphere
- Download this webcast to learn the virtual hardware design considerations for Exchange 2010, deployment using the building block approach, options for high-availability and... All Privacy Webcasts