Delta Airlines Requiring ID Verification to Erase Data

Privacy and Security Get Advice
1

Last month I flew with Delta Airlines and a couple of days ago I wrote them an email requesting data erasure. They replied asking for ID verification as well as address and phone number. I wrote them back stating that it’s absurd to ask someone for more personal details when they request to exercise their data erasure right. Furthermore, some of the data they requested is data they don’t have so they can’t verify my identity with it. I did however, wrote details about my flights with them. I also noted that they don’t have any more legitimate use for my data and I won’t lose anything if they delete it.

They replied “reminding” me that they need to verify my identity before they can fulfill my erasure request. They wrote that I can black out the passport (ID) number if I wish.

Now my dilemma: Is it worth sending them a copy of my passport and blacking out some information? (I will black out passport number, issue and expiration dates, date of birth and maybe more). Or maybe it’s not worth it?

I would like to note that previously I sent the same kind of email to a European airline and they fulfilled my request with no problem.

2

As per the GDPR, companies reserve the right to ask for an ID in order to verify the identity of the data subject, so Delta is in the right here. It is standard practice for some companies, while others only ask if they suspect that there could be something malicious going on. With a company as big as Delta Airlines I would suspect that this is standard practice.

If you really want the data deleted, go ahead and send the ID (with blacked out details, but don’t black out too much as that could raise concerns), you could inquire about what their retention policy regarding ID’s is beforehand.

Hope this helps :grinning:

2 Likes
3

Thanks for the reply. I didn’t know that was part of the GDPR. I will ask what is the retention policy regarding ID’s, that’s a good idea.

1 Like