This analysis describes what American Airlines's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
How other platforms handle this
We shall promptly destroy personal information without delay when the retention period has expired or when the purpose of processing has been achieved, and the personal information is no longer necessary.
We will promptly destroy personal information at the end of the retention period, as described above. When we destroy personal information, we do so in a way that prevents that information from being restored or reconstructed.
Where specific retention periods are required by law, we comply with those timeframes; otherwise, we apply the criteria above to determine how long to retain the information.
"We are required by other laws and regulations to continue to retain personal information even though the personal information retention period consented by data subjects has expired...we will transfer the relevant personal information to a separate database (DB)...Excerpt from American Airlines's Privacy Policy
Get the weekly coverage letter
Companies change their terms without announcing it. We capture governance documents, compare each new version with the last, and publish what changed, with the source text behind it. One email a week on what we found and what we could not reach.
The clause states: “We are required by other laws and regulations to continue to retain personal information even though the personal information retention period consented by data subjects has expired...we will transfer the relevant personal information to a separate database (DB)...”
ConductAtlas has identified this type of provision across 267 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by American Airlines.