Edition

This is a permanent edition. It carries the briefing exactly as published on this date and does not change.

Public Comment Request for Privacy International Civil Aviation Organisation (ICAO) Address by 25 August 2026

25 August 2026

By 25 August 2026, the Federal Aviation Administration is seeking public comments on the renewal of its Information Collection: Privacy International Civil Aviation Organisation (ICAO) Address. This request affects relevant agencies and stakeholders who must submit their input to inform the collection's continuation. Organisations should analyse the current information collection practices and prepare their submissions.

The Federal Aviation Administration (FAA) has opened a public comment period for the renewal of its information collection concerning the Privacy International Civil Aviation Organisation (ICAO) Address. This is not a new collection but a request for clearance to continue an existing one, requiring stakeholders to submit their views by 25 August 2026. The FAA is specifically interested in comments addressing the necessity of the information for proper agency function, its practical utility, the accuracy of burden estimates, and ways to minimise the burden on respondents, including through automated collection techniques.

Organisations involved in international civil aviation or those whose data practices intersect with ICAO address information should carefully review the existing collection. They must assess its impact on their operations and privacy frameworks, preparing detailed submissions that articulate any concerns or suggestions for improvement. DPOs and privacy counsel should ensure their organisations analyse the data collected, its purpose, and the implications for data subjects, particularly regarding international transfers and data minimisation principles.

Evidence an authority would expect to see includes a clear rationale for any proposed changes, data demonstrating current burdens, and suggestions for technological or procedural enhancements. The FAA will use these comments to determine whether to renew the collection, potentially influencing future data handling requirements related to ICAO addresses.

The collection is cleared under the Paperwork Reduction Act of 1995 and the FAA is asking the Office of Management and Budget to approve its renewal, so this window is the only point at which the existing privacy ICAO address collection is open to challenge.

Information Collection: Privacy International Civil Aviation Organization (ICAO) Address

Who this binds
Relevant agencies and stakeholders
What changed
What is fixed is the date: 25 August 2026, when comment period closes for the renewal of information collection regarding Privacy International Civil Aviation Organisation (ICAO) Address.
What to check
Submit comments on the proposed information collection request.
What this does not mean
This is a date in the diary, not a new obligation published today. Nothing in force changed this morning.

Send this to your team

The Federal Aviation Administration is seeking public comments on the renewal of its Information Collection: Privacy International Civil Aviation Organisation (ICAO) Address by 25 August 2026, affecting relevant agencies and stakeholders.

Today's question

A European company plans to transfer personal data to a third country. Which of the following is the most accurate statement regarding the EDPB's stance on anonymisation in the context of such transfers?

  1. Data that is anonymised according to the Article 29 Working Party’s 2014 Opinion is always considered outside GDPR scope for transfers.
  2. The EDPB's draft guidelines clarify that anonymity is a contextual concept, meaning data considered anonymous in one context might be identifiable in another, especially for cross border transfers.
  3. Anonymised data is explicitly covered by GDPR Article 46 transfer mechanisms, requiring SCCs or adequacy decisions.
  4. The EDPB has ruled that any data that has undergone pseudonymisation is equivalent to anonymised data for international transfers.

Answer this question on the site

Worth knowing

  1. ZOLL Medical Pays USD 3.5 Million to Settle Data Breach Lawsuit

    Healthcare organisations should recognise that data breaches can lead to significant financial liabilities, as evidenced by ZOLL Medical's USD 3.5 million settlement, underscoring the importance of robust cybersecurity measures and incident response planning.

  2. Scotland's Public Prosecution Service Warns Staff of Potential Data Exposure

    Organisations must ensure their third party suppliers maintain adequate data security, as a breach at a supplier can directly impact employee data and trigger notification obligations for the primary organisation, as seen with Scotland's public prosecution service.

  3. China Publishes Q&A on Administrative Policies for Cross Border Data Transfers

    Organisations transferring personal data out of China must review the CAC's new Q&A on cross border data transfers to ensure compliance with PIPL's notification and separate consent requirements, especially for sensitive personal information.

  4. EFF Calls for Reforms as Flock Admits Technology Needs Improvements

    Organisations deploying surveillance technologies should anticipate continued scrutiny from privacy advocates like the EFF and be prepared to implement robust reforms to address privacy concerns, even if such admissions are seen as belated.

  5. EDPB publishes draft guidelines on anonymisation for public consultation

    Working privacy professionals should review the EDPB's draft guidelines on anonymisation to understand the updated criteria for rendering personal data truly anonymous under the GDPR.

Compiled that morning from regulator, court and authority sources. Primary sources are linked on every story.