WHAT THE POLICIES SAY

Delta Air Lines, Inc. is a publicly traded U.S. airline whose Global Privacy Policy (dated May 2026) describes collection of identity, government-ID and Secure Flight passenger data, billing and travel information, and — in optional, opt-in programs — facial comparison for check-in and boarding, with images matched by U.S. Customs and Border Protection; Delta states it does not receive biometric information from that service. The policy discloses that Delta and third parties store data on user devices to deliver personalized advertising, and that booking and profile data is shared with SkyMiles Partners and promotional partners. The SkyMiles program anchors an $8.2 billion co-brand relationship with American Express. In 2025, three U.S. senators publicly questioned Delta's use of AI (with vendor Fetcherr) in fare pricing; in 2018 Delta disclosed a payment-card breach caused by chat vendor [24]7.ai.

TRACK RECORD

1 ENFORCEMENT ACTION

Delta Air Lines, Inc. submitted a data security breach report to the California Attorney General covering a breach with known dates of September 26, 2017 through October 12, 2017, the period of the [24]7.ai chat-service cyber incident that Delta separately disclosed in April 2018.

oag.ca.gov ↗

TIMELINE

NO ENTRIES ON FILE YET.

TOOLS WE RECOMMEND

PLUS

RECEIPTS

9 ON FILE

COLLECTION

Delta's Global Privacy Policy (dated May 2026) states that customer identification information collected includes Secure Flight Passenger Data such as government-issued ID, full name, and contact details, along with information from the Department of Homeland Security and biometric information categories (finger, face, voice, or iris); for the separate opt-in facial-comparison service the policy states that images are sent to U.S. Customs and Border Protection and that "Delta does not receive any biometric information."

delta.com ↗

OWNERSHIP TRANSPARENCY

Delta publishes a Global Privacy Policy dated May 2026 that names Delta Air Lines, Inc. as the entity processing the described information and documents a privacy-request channel through which customers can exercise rights such as accessing, updating, and erasing personal information, subject to applicable law.

delta.com ↗

[2026-02-11] · OWNERSHIP TRANSPARENCY

Delta Air Lines, Inc. is a U.S. public company that files annual reports with the SEC; its Form 10-K for fiscal year 2025 (filed February 11, 2026) reports 653,130,708 shares of common stock outstanding as of January 31, 2026 and directs investors to its public investor-relations site.

sec.gov ↗

SHARING

Delta's Global Privacy Policy permits sharing flight-booking information with SkyMiles Partners and promotional partners for the purpose of their providing services, and describes SkyMiles Partners as hotel, car rental, shopping, dining, vacation, and other businesses where members can earn, transfer, or redeem miles.

delta.com ↗

[2026-02-11] · SHARING

Delta's FY2025 Form 10-K states that its most significant and valuable contract to sell miles is its co-brand credit card relationship with American Express, with remuneration from American Express totaling $8.2 billion in 2025 and expected to grow to $10 billion, making the SkyMiles loyalty program a central commercial asset tied to consumer card spending.

sec.gov ↗

TRACK RECORD

oag.ca.gov ↗

[2018-04-09] · TRACK RECORD

Delta's own April 2018 incident-response page (archived) attributed a cyber incident to its chat-service vendor [24]7.ai, said only a small subset of customers would have been exposed, and committed that customers would not be responsible for any fraudulent use of payment cards resulting from the incident.

web.archive.org ↗

[2025-07-28] · TRACK RECORD

In a letter dated July 28, 2025, U.S. Senators Blumenthal, Gallego, and Warner demanded answers from Delta's CEO about the company's plan to deploy AI-based pricing, in partnership with the pricing firm Fetcherr, across 20 percent of Delta's domestic network by the end of 2025; the senators' letter alleges data-privacy concerns about what the letter characterizes as individualized pricing. These are the senders' allegations and characterizations, not regulator findings.

blumenthal.senate.gov ↗

TRACKING TECH

Delta's Global Privacy Policy discloses in its tracking-technologies section that Delta and third parties store data on users' devices to deliver personalized advertising, and elsewhere that a phone's device identification number may be sent to advertising networks to track advertising effectiveness and cap ad frequency.

delta.com ↗

LAST REVIEWED 2026-08-04 · METHODOLOGY v1.7