Journalists from the Kommersant publication said that from September 1, 2024, in addition to passport data and tickets, transport carriers will be required to send information about bank cards, IP addresses, telephone numbers, email addresses and account credentials of citizens who buy tickets to a single database. .
Major airlines and the Russian Association of Air Transport Operators are convinced that some of this information is confidential, so it is impossible to transfer it to anyone without obtaining the appropriate consent from the passenger.
As Kommersant learned, the Ministry of Transport of the Russian Federation has prepared a draft order on new regulations for the creation of automated databases of personal data on personnel and passengers. The corresponding norm will come into force on September 1 of this year. All carriers using rail, water, air transport, as well as road transport during intercity and international communications will be required to transmit this information.
All collected confidential information, as the ministry plans, should go to the Unified State Information System for Transport Security (USIS OTB), the operator of which is the Federal State Unitary Enterprise of the Ministry of Transport “Zashchitainfotrans”.
Experts emphasize that a number of government agencies have direct access to this database, including Rosaviation, Rostransnadzor, the Ministry of Internal Affairs and the FSB. At the moment, carriers transmit only the person’s passport data, travel date and route to the Unified State Information System for OTB.
In accordance with the draft order of the Ministry of Transport, which journalists from the Kommersant publication have already familiarized themselves with, it is planned to significantly expand the list of data that will be collected from passengers and transferred to the Unified State Information System for Transport Security (USIS OTB).
In particular, this will be all the data that the passenger provides during the process of booking or purchasing a ticket: telephone number and email address, information about the ticket itself. In addition, the ministry also plans to collect information about the user’s account, login and password, which is used both on the carrier’s official website and in the mobile application. In addition, IP addresses and user port numbers from which information is transmitted will also be collected. If payment by a passenger is made using bank cards, then the carrier will need to transfer the last four digits of the card and the name of the banking institution, as well as information about the cost of the ticket and class of service to the Unified State Register of OTB. The Ministry of Transport plans to ensure storage of this data for 7 years after collection.
The Russian Association of Air Transport Operators stated in a response to the draft, which has already been sent to the Ministry of Transport of the Russian Federation, that some additional data that is planned to be collected within the framework of the draft order, including credentials from user accounts, is confidential information. Therefore, they cannot be disclosed without obtaining appropriate consent from the subject of such data.
