When one of the world's largest technology providers in the tourism sector is sanctioned by a data protection authority, the news goes far beyond a simple regulatory matter. The €14.4 million fine imposed on Amadeus by theSpanish Data Protection Agency (AEPD) brings to the forefront a question that has become strategic for the entire sector: how far can travel companies go in using traveler data to better understand their customers?
While artificial intelligence, personalization and behavioral analysis are playing an increasingly important role in the strategies of tourism players, this decision serves as a reminder that GDPR compliance remains a sensitive issue, even for market leaders.
Summary
Why Amadeus was sanctioned
According to information published by the AEPD and relayed by the specialized press, the investigation originates from an anonymous complaint filed in September 2023. The Spanish regulator was interested in a pilot project developed by Amadeus around the analysis of traveler data.
According to the authority's decision, data from Amadeus' Global Distribution System (GDS) was allegedly used to identify travel profiles and trends. The project also reportedly combined certain booking data with information from the hotel industry.
The AEPD considers that several provisions of the General Data Protection Regulation (GDPR), in particular articles 6 and 14 relating to the legal basis for processing and information obligations, have not been respected.
The fine, initially set at 18 million euros, was finally reduced to 14.4 million euros after a voluntary payment made by Amadeus, without admitting responsibility.
Amadeus disputes the decision
In a statement sent to several specialized media outlets, Amadeus claims that the project in question lasted only three months and was intended to test technical data analysis capabilities in order to produce aggregated statistical models designed to improve the traveler experience.
The group also specifies that no personal data has been shared outside of its technological environment.
Amadeus also believes that the decision of the Spanish authority is not in accordance with the principle of proportionality and has announced its intention to challenge it in court.
A strong signal for the entire tourism sector
Beyond the Amadeus case, this affair comes at a pivotal moment for the travel industry. Airlines, hotel groups, travel agencies, distribution networks, and technology providers are investing heavily in data analytics to improve offer personalization and customer understanding.
The rise of artificial intelligence is further accelerating this trend. Companies now have tools capable of analyzing vast amounts of information in order to anticipate behaviors, recommend products, or optimize purchasing journeys.
However, this evolution is accompanied by increasingly strict regulatory requirements. The AEPD's decision shows that the authorities remain particularly attentive to the use of historical data, the transparency of data processing, and the provision of information to travelers.
According to the specialized press, one of the elements examined in this case concerned the use of booking data dating from 2019, several years after the trips in question.
Data is becoming a strategic issue for tourism
For tourism professionals, this decision serves primarily as a useful reminder. Data has become one of the sector's most valuable assets, but also one of its most sensitive.
The ability to personalize the customer experience is now a major competitive advantage. However, this pursuit of performance must now be accompanied by impeccable governance of personal data.
The upcoming legal developments will be closely watched by the entire European travel tech sector. They could provide important clarifications on how authorities interpret the use of traveler data in a context where artificial intelligence is playing an increasingly important role in distribution and customer relationship strategies.
One thing is already certain: the Amadeus case is a reminder that technological innovation and regulatory compliance will have to advance at the same pace in the tourism of tomorrow.
Sources
https://www.phocuswire.com/news/online/spain-fines-amadeus-traveler-profiling-pilot
👉 Access all our tourism reports, statistics and analyses on Tourisme Stats.
➡️ Check out our full report on B2B Tourism to discover the key trends, figures and strategies for 2026.
👉 Stay informed about business tourism trends: subscribe to InfosTourisme Inside.
📘 Also check out our practical pages for tourism professionals.
📩 Send your press releases.
