Marília Frias, senior associate of the Information, Communication & Technology practice, writes an article dedicated to passenger data protection for air carriers in Portugal for the March/April edition of the Legal Business magazine.

In this article, focused in the new PNR Law (PNR - passenger name record ), the lawyer explains that, “(...) for enabling reservations, carrying out the check-in process and managing flights, airlines need to process personal data provided by passengers and collected by themselves, commonly referred to as the passenger name record (PNR). (...) and that “airlines are still subject to their obligations as data controllers (especially under the General Data Protection Regulation (GDPR), and the processing of data must comply with the principles of necessity and proportionality, which is not always an easy balance to achieve as the processing of PNR involves mass-collection of personal data.”

Read the article here.