US DOT rule: airlines exempt from passenger compensation for cyberattack delays

A new US Department of Transportation rule, published last week, reduces airlines' customer compensation obligations (e.g., hotels, meals) for flight delays caused by cyberattacks, provided airlines comply with cybersecurity regulations. This marks a policy shift that could weaken consumer protections during cyber incidents, potentially incentivizing underreporting of attacks. The rule's impact is uncertain as it depends on enforcement and airline compliance.