PART 2The Passenger Information Unit
Designation of passenger information unit
3.—(1) The Home Office is designated as the passenger information unit for the United Kingdom.
(2) The PIU is responsible for—
(a)collecting PNR data from air carriers;
(b)storing and processing PNR data;
(c)where appropriate, transferring PNR data or the result of processing that data to a UK competent authority;
(d)where appropriate, exchanging PNR data and the result of processing that data with—
(i)a non-UK PIU, in accordance with regulations 9 and 10;
(ii)Europol, on receipt of a duly reasoned request made in accordance with Article 10(2) of the Passenger Name Record Directive.
Data protection officer in the PIU
4.—(1) The PIU must appoint a data protection officer responsible for monitoring and implementing safeguards in relation to the processing of PNR data by the PIU.
(2) The PIU must provide the data protection officer with—
(a)the means to perform the duties and tasks described in paragraph (1) effectively and independently, and
(b)access to all data processed by the PIU.
(3) Where the data protection officer considers that the processing of any data by the PIU has not been in accordance with Part 3 of these Regulations, the data protection officer may refer the matter to the Commissioner.