Malaysia’s Department of Personal Data Protection said it has cleared AirAsia Group of attempting to sell customers’ personal data.
It investigated media reports attributing comments from its CEO, and concluded there was no evidence the airline was trying to sell customers’ data.
"The department takes note that there is no issue of leakages and selling of personal data and is satisfied with the explanation given by AirAsia regarding the issue," it said.
The department reiterated the sale of personal data is an offence and can lead to a fine of RM500,000 or three years of prison.
It is governed by the Malaysia Data Protection Act 2010.
The action was sparked by recent news reports the airline said it had received an offer of a $1 billion loan from an unnamed US company in exchange for its customer data as possible collateral.
This led to concerns by customers AirAsia was attempting to break the law and sell or at least hand over personal data without customers’ consent.
The airline’s BIG frequent flyer program has more than 60 million members.
Written by Ray Montgomery, Asia Editor
