The GDSs are currently stressing to all Travel Agents that adding health status information in the free text fields within the PNR is not compliant with the European General Data Protection Regulation (GDPR).
The free text fields within the PNR are to be used following general data protection principles, in particular, data minimization. Free text fields cannot be used to enter information that may be considered sensitive in nature and therefore require an increased level of security.
