Global Airlines (Top 40) · Airline (Middle East, legacy) · Regulatory action
Emirates
Headline
Italy's Garante fined Emirates €180,000 in June 2026 - a real enforcement action, and a useful illustration of how little leverage a national regulator has over a state-owned carrier headquartered outside its…
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Italy's Garante fined Emirates €180,000 in June 2026 - a real enforcement action, and a useful illustration of how little leverage a national regulator has over a state-owned carrier headquartered outside its jurisdiction. €180,000 against an airline of Emirates' scale is not a deterrent; it is a filing fee. The finding is not that Emirates was uniquely bad but that the enforcement architecture available to European regulators against Gulf state carriers produces penalties that do not change behaviour, which is why the same categories of complaint keep recurring.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — as a UAE-based carrier, Emirates is not directly headquartered in the EU, but this Italian Garante enforcement action confirms GDPR's extraterritorial reach applies to any airline processing EU passengers' data, regardless of the airline's home country.
Data sharing
CONFIRMED GDPR FINE (Italy's Garante, decision of May 14, 2026, announced June 17, 2026): €180,000 penalty for severe compliance gaps in handling passenger MEDICAL DATA — specifically over Emirates' digital handling of the industry-standard 'MEDIF' (Medical Information for Fitness to Travel) form. The complaint came from a passenger asked to complete the MEDIF form although she did not fall in the categories that normally require it; the Garante found the health-data COLLECTION itself LAWFUL as necessary for safe transport and assistance, but found Emirates breached TRANSPARENCY obligations (GDPR Arts. 5(1)(a), 12, 13) and Emirates illegally STORED passenger medical files for up to SEVEN YEARS, when the Montreal Convention's 2-year statute of limitations for aviation legal claims meant no legitimate legal-defense justification existed beyond that window. Emirates was ordered, within 30 days, to identify which passengers actually must complete the form, specify the necessary fields, set retention periods and erase data held beyond them (a shorter period such as three years was floated by Emirates itself, not imposed as a cap by the Garante).
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy emirates.com/us/english/help/privacy-policy/ | Not fetched yet | NO (HTML only) |
| Terms of service emirates.com/us/english/help/terms-and-conditions/ | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.