The Data Protection Commission has opened an inquiry into Ryanair's processing of personal data as part of verification processes used for customers who book flights from third party websites or online travel agents.
The DPC said it has received a number of complaints regarding the airline's practice of requesting additional ID verification.
These verification methods include the use of facial recognition technology.
The investigation will consider whether Ryanair's use of its verification methods complies with the General Data Protection Regulation (GDPR), including the lawfulness and transparency of the data processing.
The decision to open the inquiry was taken by the Commissioners for Data Protection, Dr Des Hogan and Dale Sunderland, and was notified to Ryanair earlier this week.
"The DPC has received numerous complaints from Ryanair customers across the EU/EEA who after booking their flights were subsequently required to undergo a verification process," said Graham Doyle, Deputy Commissioner with the DPC.
"The verification methods used by Ryanair included the use of facial recognition technology using customers' biometric data," Mr Doyle said.
In a statement, Ryanair said it welcomed the DPC inquiry into its verification process, which it said protects customers from non-approved online travel agents (OTAs) "who provide fake customer contact and payment details to cover up the fact that they are overcharging and scamming consumers."
"Customers who book through these unauthorised OTAs are required to complete a simple verification process (either biometric or a digital verification form) both of which fully comply with GDPR," a Ryanair spokesperson said.
"This verification ensures that these passengers make the necessary security declarations and receive directly all safety and regulatory protocols required when travelling, as legally required," the company added.
We need your consent to load this rte-player contentWe use rte-player to manage extra content that can set cookies on your device and collect data about your activity. Please review their details and accept them to load the content.Manage Preferences
For customers using third-party travel agents, Ryanair offers three ID verification methods.
Express Verification uses facial recognition technology provided by an external company.
Customers are asked to provide a photograph of their travel documentation, take of picture of their face to verify that it matches their ID and then carry out a "liveness check" of their face by performing some actions in front of the camera on their device.
They are also asked to pay a 59 cent fee to cover the cost of the facial recognition technology, which Ryanair says it does not benefit commercially from.
We need your consent to load this rte-player contentWe use rte-player to manage extra content that can set cookies on your device and collect data about your activity. Please review their details and accept them to load the content.Manage Preferences
Customers are also offered the option of standard verification which can take up to seven days and involves submitting a picture of a completed and signed verification form together with a photo of the customer's passport or ID card.
In-person verification is also an option, which involves completing the verification process at the check-in desk at the airport at least two hours prior to departure.
Among those who lodged complaints with the DPC about Ryanair's verification process was Austrian privacy campaigner Max Schrems.
Today, he welcomed the opening of the investigation.
"It seems more like a punishment that you have to go through with this whole facial recognition exercise and there doesn't seem to be any valid point for doing it," Mr Schrems told RTÉ News.
"Anybody that booked on the Ryanair website directly did not have to go through any facial recognition and usually when you book a flight on any other website site you do not have to go through it either."
"Our big concern was that this was really just being done to rein in competitors and not really for any legitimate reason whatsoever," he added.
