Absolutely agree, data security is a not a priority for almost all organizations in Service Industry. Hopefully GDPR and E-Privacy will be the beginning of an era when organizations are forced to think about protecting user information.
The website sounds like a blatant GDPR violation, and GDPR has teeth.
I'm wondering how sharp those teeth are. What are they going to do, revoke Emirates operational licenses throughout Europe? That would not go over well with flyers...
A fine of up to €20 million or up to 4% of the annual worldwide turnover, whichever is greater.
Yeah there's a reason everyone's panicking about GDPR, it can seriously wreck your business.