Privacy principles.

NO17 should collect only the information needed to personalize travel planning. Sensitive identity documents, passport scans and card details should not be stored unless a future regulated use case specifically requires them.