Privacy Ombudsman Backs Google's $10 Million Purchase of Spirit Data

The privacy ombudsman in the Spirit Airlines bankruptcy has recommended that the court approve the sale of the carrier's de-identified data to Google. In her October 5 report, Lucy Thomson writes that Spirit and Google removed passenger databases from the deal. Google won the auction with a $10 million bid, according to Business Insider. The recommendation does not replace a court ruling: the bankruptcy court still has to approve the sale at a hearing.

What exactly Google bought

Public details are scarce. The key point is known: the sale covers deidentified data, meaning information from which direct identifiers have been removed. According to the ombudsman, passenger databases are not part of the deal. The available text does not say which datasets Google is getting, what period they cover, or what the buyer needs them for. Nobody has officially said anything about use in model training or advertising products, and attributing such plans to Google would be speculation.

The sum is small for a company of Google's scale. For the airline's bankruptcy estate, though, $10 million is significant: in proceedings like this, data, loyalty programs and brands are often among the few assets that can actually be sold at auction.

The ombudsman's role and why it matters

A consumer privacy ombudsman is appointed in US bankruptcy cases when the debtor wants to sell customers' personal data. The job is to check whether the sale contradicts the promises in the company's privacy policy and to give the court an opinion. The court treats it as guidance, though it is not formally binding.

Thomson recommends approval precisely because the scope of the deal was narrowed. Passenger databases, which hold names, contact details and travel records, were left out. De-identified information carries less risk, but not zero risk: de-identified datasets can sometimes be matched against other sources, tying records back to specific individuals. The available excerpt of the report does not show how reliably Spirit processed the data.

Key deal terms

• Seller: Spirit Airlines, a company in bankruptcy. • Buyer: Google, the auction winner. • Price: $10 million. • Subject: the airline's de-identified data. • Excluded from the deal: passenger databases. • Ombudsman's recommendation: approve; report filed October 5. • Next step: a hearing and ruling by the bankruptcy court.

What to check in practice

Former Spirit passengers should look at the case filings rather than the headlines. They should contain a description of which data fields are being transferred and how the de-identification was done. If GDPR or a similar law applies in your country, you may have your own rights to request and delete data, even if the company that held it has gone bankrupt.

For companies that hold customer data, this case is a reminder of a simple fact: a privacy policy still applies in bankruptcy. Customer data will be an asset that creditors want to sell. Separating identifiable and de-identified datasets, documenting how de-identification is done, and spelling out in the policy the terms for transfer during a restructuring are all cheaper than explaining yourself to an ombudsman.

The main question remains open: why Google wants this data. The answer will most likely emerge at the hearing or in disclosed case materials.