Data Card
Spanish Airport Operator Aena Fined €10M Over Biometric Boarding
Spain’s data protection authority has fined airport operator Aena €10 million over its biometric boarding program, citing GDPR violations in how passengers’ facial images were collected and processed.
2025-11-28CC-BY-4.0border-controlfacial-recognitionairports
About
Key Facts
- The sanction relates to Aena’s use of facial recognition for automated boarding at Spanish airports.
- Regulators found shortcomings in informed consent, transparency, and the legal basis for processing biometric data.
- The case highlights regulatory scrutiny of airport facial recognition schemes across Europe.
Card Text
Spain’s AEPD has imposed a €10 million GDPR fine on airport operator Aena for its facial recognition boarding program, spotlighting legal risks when biometric border control deployments lack clear consent, transparency, or lawful basis.