Privacy / AI Governance / Regulation
EPIC challenges Spirit Airlines' proposed bankruptcy sale of employee data to Google for AI training
An amicus brief backs a flight attendants' union objection, arguing the $10 million deal protects consumer data but not decades of payroll, discipline and internal communications records.
EPIC and Professor Seema Patel, represented by Harvard Law School’s Cyberlaw Clinic, have filed an amicus brief in Spirit Airlines’ bankruptcy proceedings opposing the proposed sale of employee data to Google for use in AI training. According to EPIC, the airline proposes to sell the data for $10 million. It includes payroll, training, discipline, travel and internal communications records, some going back decades.
The brief supports a limited objection filed by the Association of Flight Attendants-CWA, AFL-CIO. EPIC argues that the sale agreement clearly protects only consumer data, not employee data. It also says deidentification is “not a magic wand” because employees could still be identified through inferences drawn from the combined dataset.
EPIC further warns that such sales would encourage employers to over-collect worker data. The brief asks the court to require stronger privacy protections. The sources do not say when the court will rule.
Editor’s note: This article relies solely on an announcement by EPIC, an advocacy group that is a party to the filing.
Why it matters
Bankruptcy and M&A data transfers are increasingly framed as AI training-data deals, and this case tests whether employee records receive the same contractual protection as customer data. Governance teams should check that data inventories and retention schedules cover HR and internal communications archives. They should also confirm that any asset-sale or data-licensing terms explicitly address employee data. Teams relying on deidentification should document re-identification risk assessments that account for inference from large combined datasets.
Status: Alleged. Amicus brief supporting an objection in the bankruptcy case; no ruling yet
Sources
Was this useful?
Thanks. What was the problem?
Thank you — this helps us choose what to cover. If you spotted an error, please tell us what it is.
Prepared with AI assistance and reviewed by the editor before publication. Spotted an error? Tell us — see our editorial policy and methodology.
Governance areas
Who should care
- DPO
- Legal & compliance
- CDO
- AI governance lead