136 Total
20 High severity
91 Medium severity
25 Low severity

Key Facts

Is American Airlines responsible if someone gains access to your accounts by obtaining your password?
American Airlines is not responsible if someone gains access to your accounts by obtaining your password.
When will American Airlines permanently destroy any biometric data or identifiers in its possession?
American Airlines will permanently destroy any biometric data or identifiers in its possession once the initial purpose for collecting or obtaining them has been satisfied, or within three years of your last interaction with American Airlines, whichever comes first.
What does American Airlines identify as a right available under the policy regarding automated processing?
American Airlines identifies revision of decisions made solely based on automated processing of personal data affecting your interests — including decisions intended to define personal, professional, consumer and credit profiles, or aspects of personality — as a right available under the policy.
Does American Airlines knowingly collect personal information directly from children under the age of 13?
American Airlines does not knowingly collect personal information directly from children under the age of 13 — or a higher age if required by applicable law — other than when required to comply with the law or for safety and security reasons.
When does American Airlines collect personal information directly from children under the age of 13?
American Airlines does not knowingly collect personal information directly from children under the age of 13 — or a higher age if required by applicable law — other than when required to comply with the law or for safety and security reasons.
What do laws and regulations of several countries require American Airlines to provide to foreign and domestic government agencies?
American Airlines states that laws and regulations of several countries require it to provide foreign and domestic government agencies with access to personal information disclosed to it and data it holds about users and their travel plans, history, or status.
Does American Airlines reserve the right to share your information with third parties for joint activity purposes regardless of your opt-out preferences?
American Airlines reserves the right to share your information with third parties for joint activity purposes, including administrative, transactional, and analytical purposes, regardless of your opt-out preferences.
What will American Airlines not allow you to do if you decline to provide information required by law?
American Airlines will not allow you to board or travel on its aircraft if you decline to provide information required by law for American Airlines to transport you.
When will American Airlines seek your specific consent before processing sensitive personal information?
American Airlines will seek your specific consent before processing sensitive personal information where required by law and where no other lawful bases exist for processing such data.
What technical information may American Airlines receive when users use its Interactive Services?
American Airlines may receive technical information such as browser type, operating system, geolocation, internet service provider name, mobile advertising identifiers, and pages visited when users use its Interactive Services.
Stay ahead of the changes
Track American Airlines and get the diff the day its terms change.
Summary

This document explains how American Airlines handles your personal information — what it collects, how long it keeps it, and who it shares it with. American Airlines can share your data with third parties for joint activity purposes even if you opt out, and governments in multiple countries can legally require access to your travel information. American Airlines makes no warranty that your data will always be handled consistently with this policy, and it can update the policy at any time by posting the new version online.

Analysis

American Airlines' Privacy Policy establishes the terms under which American Airlines collects, retains, shares, and processes personal information from users of its Travel Services, Program Services, and Interactive Services. The policy sets a seven-year general retention period for travel- and membership-related personal data, and a separate biometric retention limit tied to purpose fulfillment or three years from last interaction, whichever comes first. American Airlines reserves the right to share personal information with third parties for joint activity purposes regardless of user opt-out preferences, and discloses that foreign and domestic government agencies receive access to user travel data as legally compelled across multiple jurisdictions. The policy disclaims all warranties regarding data protection and limits liability for account compromise through password theft, while acknowledging a user right to seek revision of solely automated decisions affecting personal, professional, consumer, or credit profiles.

What this means for you

Your personal information related to travel or membership may be retained by American Airlines for up to seven years after your travel ends or membership is terminated, and biometric data is destroyed when its collection purpose is met or within three years of your last interaction. Opting out does not prevent American Airlines from sharing your data with third parties for joint activity purposes, including administrative, transactional, and analytical uses. If American Airlines uses automated processing of your personal data to make decisions affecting your personal, professional, consumer, or credit profile, you have a right under this policy to seek revision of those decisions — you can exercise that right by contacting American Airlines directly.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

136 provisions
12 featured
14 clause types
20 high severity
Data Sharing 26 5 high
Show all 26 data sharing provisions
Privacy Rights 35 1 high
Show all 35 privacy rights provisions
AI / Automated Decision-Making 1 1 high
Stay ahead of the changes

Monitoring

American Airlines has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle American Not Responsible for Unauthorized Account Access and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured August 5, 2026 01:07 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000633
Version ID CA-V-005539
SHA-256 593e7a0ab196c93c8781c09dd0ad6079ede5b6793804b06af54f1d9e5292acad
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans