Cyber Crime and Data Protection in Civil Aviation

Cyber Crime and Data Protection in Civil Aviation

Dates

1 Week: September 29 - October 3, 2025   

1 Week: October 20 - 24, 2025

Location

• Cape Town                             
• Johannesburg

Format

 In-Person/Online

Tuition (In Person)

1 Week

$999 pp individual                      

$800 pp for groups of 5+

Tuition (Online)

1 Week

$600 pp individual                      

$400 pp for groups of 5+

Course Overview

• Presentation and explanation of international cyber security regulations, standards and guidelines applicable to civil aviation.
• Presentation and explanation of the most important aviation industry cyber security related documents.
• Presentation of the main issues related to data protection in civil aviation and brief presentation of some of the best-known cases of data leak in civil aviation.
• Presentation and explanation of the European Union (EU) cyber security regulations, standards and guidelines applicable to civil aviation and their implications for non- EU airlines and other non-EU entities.
• Presentation and explanation of the EU General Data Protection Regulation (GDRP) i.e. Regulation 2016/679 of the European Parliament and Council on the protection of natural persons with respect to the protection of personal data and on the free movement of such data and its implication for non- EU airlines and other non-EU entities.

Course Outline

Day 1

• The Beijing Convention on the Suppression of Unlawful Acts Relating to International Civil Aviation (2010) with the Supplementary Protocol (2010).
• Annex 17 to the Chicago International Convention on Civil Aviation (last edition).
• International Civil Aviation Association (ICAO) manual and documents related to cyber security in civil aviation: ICAO Aviation Cybersecurity Strategy and ICAO Cybersecurity Action Plan.

Day 2

• Continuation from Day 1: ICAO Aviation Cybersecurity Strategy and ICAO Cybersecurity Action Plan.
• ICAO Cybersecurity Policy Guidance and ICAO Cybersecurity Culture in Civil Aviation.

Day 3

• International Air Transport Association (IATA) Aviation Cyber Security Guidance Material (2021).
• Presentation of the main issues related to data protection in civil aviation and brief presentation of some best-known cases of data leak in civil aviation.

Day 4

• Presentation and explanation of the EU General Data Protection Regulation (GDPR) i.e. Regulation 2016/679 of the European Parliament and Council on the protection of natural persons with respect to the protection of personal data and on the free movement of such data and its implication for non- EU airlines and other non-EU entities.
• Presentation of personal data protection issues for civil aviation arising out from use of Internet based reservations and ticket sale Global Distribution Systems (GDS) like Amadeus, Sabre, Galileo, Worldspan.

Day 5

• Case Study – Privacy policy of Polish Airports S.A. as an example of personal data protection policy.
• Summary presentation – personal data protection in civil aviation technology challenges and legal efforts.