Etihad Airways

What this pass recorded. No confirmed findings this pass. Etihad is wholly owned by the Abu Dhabi government, and the same disclosure-regime gap that applies to Qatar Airways applies here: a federal data protection law whose enforcement against a state-owned carrier is essentially untested, little or no public breach-disclosure record, and sovereign immunity considerations that complicate any attempt at legal recourse by a foreign passenger. The honest entry is that this row is unverified rather than clean, and that a European or US passenger's GDPR or state-law rights against a Gulf state carrier are far more theoretical than the privacy policy implies.

• Severity
• Evidence tierUnassigned
• Claims confirmed
• Last verified2026-08-04

Primary source. None recorded — Unverified - heuristic first draft.

Arbitration

Not independently confirmed this pass; Etihad is UAE government-owned and not directly subject to GDPR, though GDPR applies for EU passenger data (see Emirates row for a comparable Gulf-carrier GDPR enforcement precedent that may be instructive here).

Contacts

Privacy contact. Not recorded.

Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.

Mailing address. Not recorded.