This analysis describes what American Airlines's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes American Airlines' operational framework for sensitive data handling by conditioning processing authority on legal requirements and consent mechanisms. It creates a procedural requirement that sensitive data processing must be justified either by applicable law or by affirmative user consent, limiting the bases upon which such processing can occur.
Under this clause, American Airlines' collection and processing of sensitive personal information is restricted to lawful bases and requires the company to request specific consent before processing sensitive data where law requires it and no other lawful basis applies. Users encounter consent requests as the operational mechanism through which the company satisfies these legal processing conditions.
Cross-platform context
See how other platforms handle Sensitive Personal Information Processing and similar clauses.
Compare across platforms →Monitoring
American Airlines has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"To the extent that the personal information we collect constitutes sensitive personal information under applicable law, American will collect and process this sensitive personal information within the limits provided by applicable law. Where required by law, and where no other lawful bases exist for processing such data (such as to fulfill laws promoting a substantial public interest), American will seek your specific consent before processing sensitive personal information.— Excerpt from American Airlines's American Airlines Privacy Policy
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
This provision establishes American Airlines' operational framework for sensitive data handling by conditioning processing authority on legal requirements and consent mechanisms. It creates a procedural requirement that sensitive data processing must be justified either by applicable law or by affirmative user consent, limiting the bases upon which such processing can occur.
Under this clause, American Airlines' collection and processing of sensitive personal information is restricted to lawful bases and requires the company to request specific consent before processing sensitive data where law requires it and no other lawful basis applies. Users encounter consent requests as the operational mechanism through which the company satisfies these legal processing conditions.
ConductAtlas has identified this type of provision across 2 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by American Airlines.