AirAsia's data monetisation plan raises concerns

The standard practice of information collection by an airline is for flight booking and not meant for unauthorised parties, says CyberSecurity by SHAHEERA AZNAM SHAH / pic by TMR FILE MONETISATION of personal data by AirAsia Group Bhd's digital asset will violate Malaysia's Personal Data Protection Act (PDPA) 2010 if the transaction involves the exchange of its customers' personal information gathered through its array of businesses. CyberSecurity Malaysia CEO Datuk Dr Amirudin Abdul Wahab said the standard practice of information collection by an airline is done for the purpose of flight booking and not legally meant for unauthorised parties to access. "Generally, the initial consent, for example, the information given by the customers was based on the requirement for booking purposes which cannot be given to others in whatever manner unless there is a clear statement from AirAsia s...