WestJet Met Federal Privacy Security Commitments
The airline satisfied the Office of the Privacy Commissioner of Canada after implementing new digital safeguards.
Updated on Oct. 14, 2026 in Cybersecurity
Live Poll
Do you trust companies to effectively secure your data after a confirmed cyberattack?
WestJet has officially met the security commitments required by the Office of the Privacy Commissioner of Canada. The airline agreed to these terms in July 2026 to resolve deficiencies exposed by a previous cyberattack.
Why it matters
This move strengthens data protection for airline customers by ensuring the company follows strict identity and access standards. It concludes a regulatory process designed to correct security gaps that once left passenger information vulnerable.
WestJet implemented reinforced multi-factor authentication requirements and strengthened identity and access controls. These technical upgrades were mandated to improve security awareness and internal data systems.
The players
WestJet
WestJet is a major Canadian airline that provides scheduled air services across North America, Europe, and the Caribbean.
Office of the Privacy Commissioner of Canada
The Office of the Privacy Commissioner of Canada is the federal agency responsible for protecting and promoting privacy rights for Canadian citizens.
The details
Following a cyberattack that exposed security deficiencies, WestJet signed a compliance letter detailing necessary enhancements to its digital infrastructure. The airline successfully completed these improvements, leading the Privacy Commissioner to confirm that all commitments have been met.
Timeline
WestJet signed the compliance letter with the Privacy Commissioner in July 2026.
The Privacy Commissioner announced on October 14, 2026, that WestJet had met its security commitments.
The Tech Race
The resolution reflects a broader industry shift where airlines are aggressively updating legacy systems to combat increasing threats from sophisticated cyberattackers. This move positions the company to better defend against modern digital intrusion attempts that have plagued the aviation sector.
Customers can expect more robust identity verification processes when managing their airline accounts online. These changes aim to improve the security of personal data and reduce the risk of future account compromises.
The takeaway
Companies are increasingly forced to standardize security protocols as federal regulators heighten their oversight of digital safety. Travellers should maintain vigilant account security by utilizing unique passwords and enabling all available multi-factor authentication tools.
Further reading
For more information on national digital protections, visit the Cybersecurity section.
Source note: This article includes information reported by Mlex.
Live Poll
Do you trust companies to effectively secure your data after a confirmed cyberattack?
