Sensitive information will be required from AOs for the purpose of generating the Flight Emissions Label. Where will this data be stored and who will have access to it?

The label process will be owned and operated by EASA. EASA makes use of contractors under Non-disclosure agreement (NDA) for the development and running of the label, however these organisations have strict rights of access and use.

The digital reporting tool (Sustainability Portal) for aircraft operators to report their data follows strict security standards. The reporting tool requires two-factor authentication (2FA) for all users to prevent unauthorised login. EASA protects data in transit between your client and our website by using the Transport Layer Security (TLS) secure protocol ensuring their confidentiality and integrity.

The Information Security Management System (ISMS) of the contractor of the Sustainability Portal is independently audited and compliant with the ISO 27001 information security standard.