Google’s reported $10 million data purchase from Spirit Airlines draws fresh scrutiny from U.S. lawmakers

U.S. lawmakers are raising concerns after a report said Google paid $10 million for data connected to Spirit Airlines, putting a spotlight on how large technology companies obtain and use transportation-related information as artificial intelligence becomes more central to their products.

The report, carried by Yahoo Finance, described the transaction as a $10 million purchase of Spirit Airlines data and said the arrangement has drawn scrutiny from members of Congress. In the framing, lawmakers questioned whether the data was obtained and handled in a way that matches expectations for consumer privacy and responsible use.

The reported episode sits within a broader debate over data brokerage and “data supply chains,” particularly for companies developing or deploying AI systems that may rely on large volumes of structured and unstructured information. While the specific dataset, the intended use, and the protections applied were not spelled out in the information available here, the policy concern is consistent across recent legislative activity: whether companies can demonstrate transparency, appropriate consent, and adequate safeguards when repurposing data for advanced analytics.

For Google, the company’s AI strategy has increasingly involved ingesting diverse sources of information to improve models and build product capabilities. Google has also faced longstanding questions over how it complies with privacy laws and internal governance around data access. This latest attention from lawmakers suggests that procurement decisions, not just model outputs, may be coming under more direct oversight.

The Yahoo Finance update indicated that Google offered a response, but the details of that response were not included in the materials reviewed for this draft. As a result, it is not possible to confirm, based on the available text here, what Google specifically said about the scope of the data, whether it was de-identified, how long it would be retained, or what compliance framework it relied on.

The immediate policy takeaway is that lawmakers appear willing to examine not only whether AI systems generate problematic results, but also the underlying acquisition and handling of data used to build or train those systems. If further documentation emerges, questions likely will focus on data ownership, authorization, privacy-impact assessments, and what assurances were provided to the parties whose information was involved.

What to watch next is whether lawmakers request additional records, such as contracts, data-handling policies, or privacy documentation tied to the purchase. In parallel, Alphabet and Google may be asked to clarify the dataset’s nature and intended use, and to explain how they ensure consumer information is protected under applicable federal and state requirements.