Council Decision (EU) 2019/2107Show full title

Orientations U.K.

The Member States of the Union, acting jointly in the interests of the Union, shall support the inclusion of the following standards and principles in any future ICAO SARPs on PNR data:

1.

Concerning the modalities of PNR transmission:

(a)

Method of transmission: in order to protect the personal data that are contained in the air carriers’ systems and to ensure that they remain in control of those systems, data should be transmitted using the ‘push’ system exclusively.

(b)

Transmission protocols: the use of suitable, secure and open standard protocols as part of internationally accepted reference protocols for the transmission of PNR data should be encouraged with the aim of gradually increasing their uptake and eventually replacing proprietary standards.

(c)

Frequency of transmission: the frequency and the timing of PNR data transmissions should not create an unreasonable burden on air carriers and should be limited to what is strictly necessary for the purpose of law enforcement and border security to fight terrorism and serious crime.

(d)

No obligation on the air carriers to collect additional data: air carriers should not be required to collect additional PNR data compared to what they already do or to collect certain types of data, but only to transmit what they already collect as part of their business.

2.

Concerning the modalities of PNR processing:

(a)

Timing of transmission and processing: subject to the appropriate guarantees for the protection of privacy of the persons concerned, PNR data can be made available well in advance of a flight’s arrival or departure, and hence provide authorities with more time for processing and analysing the data, and potentially taking action.

(b)

Comparison against pre-determined criteria and databases: the authorities should process PNR data using evidence-based criteria and databases that are relevant for the fight against terrorism and serious crime.

3.

Concerning the protection of personal data:

(a)

Lawfulness, fairness and transparency of processing: there needs to be a lawful basis for the processing of personal data, in order to make individuals aware of the risks, safeguards and rights in relation to the processing of their personal data and of how to exercise their rights in relation to the processing.

(b)

Purpose limitation: the purposes for which PNR data may be used by authorities should be clearly set and should be no wider than what is necessary in view of the aims to be achieved, in particular for law enforcement and border security purposes to fight terrorism and serious crime.

(c)

Scope of PNR data: the PNR data elements to be transferred by airlines should be clearly identified and exhaustively listed. This list should be standardised to ensure that such data is kept to the minimum, while preventing the processing of sensitive data, including data revealing a person’s racial or ethnic origins, political opinions or religious or philosophical beliefs, trade union membership, health, sexual life or sexual orientation.

(d)

Use of PNR data: the further processing of the PNR data should be limited to the purposes of the original transfer, based on objective criteria and subject to substantive and procedural conditions in line with the requirements applicable to the transfers of personal data.

(e)

Automated processing of PNR data: automated processing should be based on objective, non-discriminatory and reliable, pre-established criteria and should not be used as the sole basis for any decisions with adverse legal effects or seriously affecting a person.

(f)

Data retention: the period of retention of the PNR data should be restricted and not be longer than necessary for the original objective pursued. Deletion of the data should be ensured in accordance with the legal requirements of the source country. At the end of the retention period, the PNR data should be deleted or anonymised.

(g)

Disclosure of PNR data to authorised authorities: the further disclosure of PNR data to other government authorities within the same State or to other ICAO Member States on a case-by-case basis may only take place if the recipient authority exercises functions related to the fight against terrorism or serious transnational crime and ensures the same protection as that afforded by the disclosing authority.

(h)

Data security: appropriate measures must be taken to protect the security, confidentiality and integrity of the PNR data.

(i)

Transparency and notice: subject to necessary and proportionate restrictions, individuals should be notified of the processing of their PNR data and be informed about the rights and means of redress afforded to them.

(j)

Access, rectification and deletion: subject to necessary and proportionate restrictions, individuals should have the right to get access to, and the right to rectification of, their PNR data.

(k)

Redress: individuals should have the right to effective administrative and judicial redress in case they consider that their rights to privacy and data protection have been infringed.

(l)

Oversight and accountability: the authorities using PNR data should be accountable to and supervised by an independent public authority with effective powers of investigation and enforcement that should be in a position to execute its tasks free from any influence, in particular from law enforcement authorities.

4.

Concerning PNR information sharing among the law enforcement authorities:

(a)

Promotion of information sharing: case-by-case exchanges of PNR data among the law enforcement authorities of different ICAO Member States should be promoted in order to improve international cooperation on the prevention, detection, investigation and prosecution of terrorism and serious crime.

(b)

Security of information exchange: information sharing should take place through appropriate channels ensuring adequate data security and be fully compliant with international and national legal frameworks for the protection of personal data.