77 Total
24 High severity
42 Medium severity
11 Low severity

Key Facts

Does Delta Airlines collect biometric information?
Delta Airlines collects biometric information to verify and authenticate identity and to conduct security screening required by most governments for travel within and between countries.
Does Delta Airlines use information about a user's previous travel, transactions, and communications to tailor products and services?
Delta Airlines uses information about a user's previous travel, transactions, and communications — which it may combine with other information it holds — to tailor products and services by anticipating the user's likely preferences.
May Delta Airlines combine information about a user's previous travel, transactions, and communications with other information it holds?
Delta Airlines uses information about a user's previous travel, transactions, and communications — which it may combine with other information it holds — to tailor products and services by anticipating the user's likely preferences.
Does Delta Airlines require your consent for using information related to your passport beyond what is necessary for your flight?
Delta Airlines requires your consent as the legal basis for using information related to your passport beyond what is necessary for your flight, your biometric information, or information used to send you marketing communications.
Does Delta Airlines require your consent for using your biometric information?
Delta Airlines requires your consent as the legal basis for using information related to your passport beyond what is necessary for your flight, your biometric information, or information used to send you marketing communications.
Does Delta Airlines require your consent for using information used to send you marketing communications?
Delta Airlines requires your consent as the legal basis for using information related to your passport beyond what is necessary for your flight, your biometric information, or information used to send you marketing communications.
Do users have the option to use facial comparison technology for identity verification at flight check-in, bag drop, and boarding gates?
Delta Airlines gives users the option to choose to use facial comparison technology for identity verification at flight check-in, bag drop, and boarding gates.
Does Delta Airlines use personal information to send marketing communications unless consent was provided at the time of collection?
Delta Airlines does not use personal information to send marketing communications unless consent was provided at the time of collection.
May Delta Airlines process sensitive or special categories of personal information?
Delta Airlines may process sensitive or special categories of personal information for the purpose for which it was provided or for which express consent has been given.
For what purposes may Delta Airlines process sensitive or special categories of personal information?
Delta Airlines may process sensitive or special categories of personal information for the purpose for which it was provided or for which express consent has been given.
Stay ahead of the changes
Track Delta Airlines and get the diff the day its terms change.
Summary

Delta Airlines collects sensitive personal data — including biometrics and passport details — and uses it, along with your travel and transaction history, to verify your identity and tailor its services. You must consent before Delta can use your data for marketing or process your biometric and passport information beyond what your flight requires, and you can withdraw that consent at any time. Third parties also access and store data on your device through Delta's Website and App, including for personalized advertising.

Analysis

Delta Airlines' Privacy Policy establishes the conditions under which Delta collects, uses, and shares personal information across its services. The policy identifies consent as the legal basis for processing biometric data, passport information beyond flight necessity, and marketing communications, and requires that consent for marketing be obtained at the moment of collection. Delta and third parties may access and store data on users' devices for service operation, performance analysis, and personalized advertising, and Delta may combine travel, transaction, and communication data to construct preference profiles for product tailoring. Sensitive categories of personal information may only be processed for the purpose for which they were provided or for which express consent has been given, and users may withdraw consent to any specific data use at any time through the method described at collection or by submitting a privacy request through Delta's Privacy Request Form.

What this means for you

As an individual user, you control whether biometric data such as facial comparison is used for identity verification at check-in, bag drop, and boarding — that use is optional. Delta will not send you marketing communications unless you consented at the time your information was collected, and if you did consent to any specific data use, you can withdraw that consent at any time by using the method described when consent was given or by submitting a request through Delta's Privacy Request Form. If you provide another person's information to Delta, you are responsible for confirming that person has authorized the sharing and consented to its use under the Privacy Policy.

Institutional Analysis
Stay ahead of the changes

Institutional analysis available with Insight

Which mapped governance frameworks each document engages, tied to the specific provisions that engage them.

1 important change detected

2 versions captured · Last updated: May 2026

What changed Delta updated its privacy policy on May 22, 2026, restructuring how users manage their personal information and privacy rights. The policy previously directed users to a single 'Privacy Requests' form and SkyMiles account deletion page; the updated version breaks this into five numbered subsections: Delete SkyMiles Account, Manage Email Marketing, Manage Tracking, Update Information, and Submit Privacy Requests, with specific instructions for each category. The change also adds explicit language stating that if a privacy request does not appear as an option on the form, it is not currently available in the user's location, and clarifies that users can withdraw previously provided consent using the method described at consent time or through the privacy request form.
Why this matters The updated policy reorganizes how you access and manage your personal information with Delta. Previously, privacy options were described in prose format pointing to a single Privacy Request Form and SkyMiles Help page. The revised policy now lists five distinct categories: Delete SkyMiles Account, Manage Email Marketing, Manage Tracking, Update Information, and Submit Privacy Requests, each with specific instructions. The policy now explicitly states that if your privacy request type does not appear on the form, it is not currently available in your location. You can withdraw consent you previously provided by using the method described when you gave consent or by submitting a privacy request.
View full change record →
Featured, High severity
Featured, Medium severity

Complete Provision Index

Every distinct legal provision identified in this document. Featured provisions appear above with analysis.

77 provisions
12 featured
15 clause types
24 high severity
Acceptable Use Restrictions 1 1 high
Enforcement Actions 1 1 high
Platform Discretion 1 1 high
Disclosure and Transparency Requirements 1
Liability Limitation 1
Stay ahead of the changes

Monitoring

Delta Airlines has updated this document before. Monitor includes same-day alerts, structured change summaries, and monitoring for up to 20 platforms.

Stay ahead of the changes

Governance Intelligence

Need provision-level monitoring and regulatory mapping? Insight includes governance timelines, drift analysis, and full provision tracking.

Cross-platform context

See how other platforms handle Biometric Data Collection for Identity Verification and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured May 22, 2026 01:13 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000629
Version ID CA-V-002884
SHA-256 9fac3865538459e57b3eeb55d06c024ba9483f7c1afb035c6fd84d69c34fe64d
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 352+ platforms.

Start monitoring → Compare plans