The United Kingdom’s data protection regulator is investigating the leak of Air India’s passenger data which has impacted 4.5 million customers globally.
India does not have a specific data protection law and a bill on the subject is pending in Lok Sabha since 2019. However, European Union and UK laws require airlines to put in place measures for data protection and report cases of data breach to regulators in the continent within 72 hours of becoming aware of it. Non-compliance or negligence can result in steep fines.
“Air India has reported an incident to us and we are investigating. Anyone