Data protection is a vital topic for all involved. As Air France KLM we expect from you, as our supplier/data processor, to maintain the agreed set of procedural and technical measures for data protection. Protection of personal data is becoming even more important. Privacy legislation is becoming stricter and enforcement by data protection authorities will become more visible, incorporating a breach notification obligation.
In anticipation of new European legislation, the Dutch Data Protection Act introduces the obligation to report certain data breaches to the Dutch Data Protection Authority ("College Bescherming Persoonsgegevens" or "Autoriteit Persoonsgegevens"), as from January 01, 2016.
As such, it will become mandatory to report any data breach to KLM. A data breach has occurred in case the agreed data security was compromised and personal data has been lost and has fallen into the hands of unauthorized persons.
In that case please send an email notification to KLM (KLMPrivacyOfficeklm.com), containing contact details and details about the personal data that is involved(number of persons involved; number of data-elements; which type of data). In return you will be contacted by KLM for further steps. Meanwhile your notification will be handled with utmost care and confidentiality