Google buying Spirit Airlines passenger data raises serious privacy flags

Google purchased data from Spirit Airlines at a bankruptcy auction, ostensibly for AI training purposes. The HN reaction was blunt: 'How the fuck is that even remotely legal?' The 'deidentified' classification is being treated with heavy skepticism, especially given the breadth of travel data involved, which includes itineraries, purchasing patterns, and potentially identity-linked records.

This is part of a growing pattern of AI data acquisition through non-obvious channels. Bankruptcy auctions are becoming a route to datasets that wouldn't be available through normal commercial means. Passengers who shared data with Spirit had no way to anticipate it ending up in a Google AI training pipeline.

The legal framework around 'deidentification' is under increasing stress. Researchers have repeatedly shown that travel data is highly re-identifiable, and the combination of AI capabilities with large behavioral datasets makes the 'it's deidentified' defense weaker than it was five years ago.