Global Data Privacy Protection GDPR Global Data Privacy Protection ZED MIBA AGM 2018 | Dubrovnik

GDPR Significant change to privacy law in the European Union as of 25 May 2018 The GDPR will capture the activities of most major carriers, including all carriers that market their services to EU residents IATA’s business activities include the collection, processing, use and storage of personal information, both directly and through third party suppliers or subcontractors. IATA conducted a Data mapping exercise to assess the types of personal information collected by business units, the purposes and uses to which such data is put, its circulation inside and outside IATA, and how such data is retained. ZED MIBA AGM 2018 | Dubrovnik

As a result, it was considered appropriate to add a data protection notice to the e-ticket and itinerary receipt documentation issued to passengers and following Resolutions were amended as of 1 April 2018: Resolutions 722f, 722g, 722h, 724, 725g and 725h The Carrier and system providers will be automatically including the notice in automated itinerary receipts ZED MIBA AGM 2018 | Dubrovnik

Members should take the necessary actions to ensure that the notice above appears in the relevant parts of their e-ticket itinerary receipt. For online e-tickets (i.e. direct sales), there is no requirement to include this notice and the carrier’s own notice should be substituted ZED MIBA AGM 2018 | Dubrovnik

ZED MIBA AGM 2018 | Dubrovnik

Thank you ZED MIBA AGM 2018 | Dubrovnik