Two different kinds of protection
The revised terms do two separate jobs, and the difference between them is the story.
The first job is exclusion. Aviation Today reports that 20 categories never transfer at all. Read its examples closely and they map what an employer's files actually hold about the people who worked there: health and disability records, drug test results, disciplinary history, pay and bank details, identity documents, fatigue reports and the safety-reporting material that aviation runs on voluntary candor. Exclusion prevents covered records from being transferred if implemented correctly — it does not depend on a scrubbing process working well, though it does depend on the records being identified and separated correctly.
The second job is de-identification, and it covers the other records eligible for transfer under the agreement: the emails, messages, spreadsheets and calendars that make up the archive. Here the protection is a process, not an absence. Eligible records would transfer, if the sale is approved, after a third party removes identifying information to the ISO 27559 standard, an independent agent chosen in consultation with the unions checks the result, and Google contractually agrees not to try to reverse it. That is a stronger arrangement than the one originally proposed. It is still an arrangement in which the protection rests on scrubbing quality and on a promise, rather than on the records staying where they were.
The unions' original objection, filed in August, was aimed at exactly that gap: a name removed from an email does not make the email anonymous when the same person's schedule, base, role and history appear across linked systems. ISO 27559 and an independent check narrow the gap. They do not close it the way exclusion does.
A dated sequence, and a case to watch
The sequence matters. Spirit halted operations in May 2026. Google's bid for the internal archive was selected at auction in August, and AFA challenged the sale that month. In October, the court's consumer privacy ombudsman recommended approval on a track that dealt with the passenger side: personal information from 97 million customers was excluded there. The employee-side protections arrived in November, through the unions' objections in the bankruptcy case, as a negotiated outcome.
Why the case is worth watching: a defunct company's internal archive is a new kind of asset — a complete record of how a business actually ran, written by people who never wrote it for an AI lab. This negotiation is the first visible attempt to price and condition that kind of transfer, and the Spirit list of 20 categories is now a document the next set of negotiators can start from. Whether it becomes a template is a question for the next case, and for the judge who has yet to rule on this one.
Sources
- [1] Reuters, "Google agrees to additional privacy protections in Spirit Airlines data sale", David Shepardson, November 10, 2026 (wire copy read first-hand by the ALFW desk: $10 million proposed deal, August auction, May shutdown, union withdrawal, independent verification agent chosen in consultation with unions, re-identification ban, secure-environment and confidentiality duties, about 120 lawmakers led by Warren and Horsford, 100 million emails / 500 million Teams messages as the lawmakers' figures, October ombudsman recommendation and the 97 million passenger exclusion, Google's October statement, Spirit spokesperson statement)Read source
- [2] Aviation Today, "Former Spirit Airlines Staff Gain Privacy Protections In Google's Proposed Data Deal", November 11, 2026 (the 20 excluded categories in detail, the ISO 27559 requirement, the coalition of unions — AFA, ALPA, IAM, TWU Local 570 — and the August objection argument about cross-system linkage; read first-hand by the drafting worker)Read source