The Passenger Name Record Data and Miscellaneous Amendments Regulations 2018

[^key-2e8e7b4b88b32a97024aced18fcbfe30]: Words in reg. 11(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 9(4)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-7ab89d80c3fe3ff3392974bad566ea31]: Words in reg. 11(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 9(4)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-f7313e64a8aec5cbc349bab65ea319f4]: Words in reg. 12 heading substituted (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(a) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-1752547ed48766c5040a7dec054527f0]: Reg. 12(1)-(2A) substituted for reg. 12(1)(2) (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(b) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-ed2632d30685c902d39d465dddaa4ee0]: Words in reg. 12(4) substituted (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(c) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-1f468c0dcab8869c67b6512e32be35b0]: Word in reg. 12 heading inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-2d74de0a1c40ec0e2566f4279f7dd15e]: Words in reg. 12 heading substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-0f2ddab8061aebcc92387efae55fd853]: Reg. 12(1)(1A) substituted for reg. 12(1) (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(3) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-494d4e2413fa8dccfd3e9dc8404993d1]: Words in reg. 12(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-eabf84c0cd4e477107f01a0b7126ec30]: Words in reg. 12(2)(b) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-cc1e43f10150bc60755f47214821e355]: Words in reg. 12(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-5ab166564890cf270673724d5b21cf15]: Words in reg. 12(2)(c) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(d) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-4429efb962769d1d4f56e2f178ab4766]: Words in reg. 12(2A) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-3951b5e38b6ced0ef34d055bec291af7]: Reg. 12(2A)(a) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-b49ba1dacef82472136e4e41c01c5840]: Words in reg. 12(2A) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-2e2158db672a79d267fd24ab6ed1f13d]: Reg. 12(2B)-(2F) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(6) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-764f1f61ccee48204f7df29426a06c64]: Words in reg. 12(3)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(7) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-d6764ab5a33f054d06146e17a368b4de]: Words in reg. 12(4) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(8)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-7d0fb3b2decee3ca05d7f05ae04bf547]: Words in reg. 12(4) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(8)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-d68af1f17c996da9a998ed0f7bbb6dae]: Reg. 13(1) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(2) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-0243080b4e6e5a33a014b06d56ff7f52]: Reg. 13(1A)-(1C) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(3) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-511c8b000888852ed21607ac76d703cd]: Words in reg. 13(2) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(4)(a) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-4a219196e729644a774b78ba7ac81b34]: Word in reg. 13(2)(e) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(4)(b) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-7020b6cb6a10d3f7a447655471603903]: Reg. 13(2)(g)(h) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(4)(c) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-5fa2ede78da74a150f90214a06b9913d]: Word in reg. 13(3) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(5) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-71c503a9c475be317f1e12a260f743d7]: Reg. 13(3A) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(6) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-48ff67df0cc3fe95ec57c8140ebf1d78]: Words in reg. 13(4)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(7) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-3a4d4f86d0501c7b122a3c6f00ce53c4]: Words in reg. 13(6) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(8) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-1fda344ad8768a00ac715d9a735dd7cf]: Reg. 13(7)-(10) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 12(9) (with Sch. 2 para. 17, Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-6d1a3fdd051a17d5343ac380f0256e03]: Words in reg. 14(3)(c) omitted (31.12.2020) by virtue of The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(9) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-fb0b84024d7b6e32ac237c1711188d22]: Reg. 14(1A) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 15(2) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-b5fd0aee9fdfae55ef8dbc3ba621007d]: Words in reg. 14(3)(c) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 15(3) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-48a2a661bd4064ab84fc0d9ed2058058]: Reg. 15 omitted (31.12.2020) by virtue of The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(10) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-a571b7f6f52c1638a9eafe5357320b0b]: Words in reg. 16(2) renumbered as reg. 16(2)(a) (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 16(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-e9bef873dac8ffe6747bdc62297cea9a]: Reg. 16(2)(b) and word inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 16(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)

[^key-f68784e8443b43f15f90f0d8895ccb04]: Words in reg. 2(1) substituted (23.7.2021) by The European Union (Future Relationship) Act 2020 (References to the Trade and Cooperation Agreement) Regulations 2021 (S.I. 2021/884), regs. 1(2), 3(1) (with reg. 1(3)(a))

[^M_F_16f8a0c2-76ea-4b52-b4de-ebf00e5b54c0]: Words in reg. 2 omitted (31.12.2020) by virtue of The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(2)(b)(i) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^M_F_5371b19b-b27b-4ee2-d844-e49f617a5ecb]: Words in reg. 2 omitted (31.12.2020) by virtue of The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(2)(b)(ii) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)

[^key-edfa2f1d3ea5c87b43c4b901406e075b]: Reg. 13B inserted (31.12.2023) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(7), Sch. 2 para. 14 (with Sch. 6 para. 9); S.I. 2023/1174, reg. 2

[^key-4cce512fc48016ab0bc65ba684e5067e]: Words in reg. 2 substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(i)

[^key-58ef733333b9682537115634d2a0d788]: Words in reg. 2 substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(ii)

[^key-7aee162998367860754ac3293be6c9f7]: Words in reg. 2 substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(iii)

[^key-9d09b1acd67c3bd47317f8a6cb8cedc3]: Words in reg. 2 inserted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(iv)(aa)

[^key-0f310a06114c89d5d2471f8c07c522ab]: Word in reg. 2 substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(iv)(bb)

[^key-3a726cb04d83c94fa5bcd4b91111890b]: Words in reg. 2 substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(a)(v)

[^key-6f4d7dde8975cd113a8f1c746a539fab]: Word in reg. 3(2)(a) omitted (19.12.2024) by virtue of The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(b)

[^key-32778301171e427fa9ed28c94db3c8ef]: Word in reg. 5(1) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(c)

[^key-8f5e22779078fdd49eef17bf8acaa20c]: Word in reg. 6(1) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(d)

[^key-39d0099043db8a58fc1822a2fefc17be]: Word in reg. 12(2F) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(e)

[^key-760acac9edb5c62c37d084cbfba6d1a7]: Word in reg. 13(1)(a) omitted (19.12.2024) by virtue of The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(f)(i)

[^key-e1ffb9111af30da7d8c2ea7a6d61beb3]: Word in reg. 13(2) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(f)(ii)

[^key-f3c6815f6fd4b9df8fab63cf0e77ad98]: Words in reg. 13(2)(d) inserted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(f)(iii)

[^key-5f59e875aa4344e824b81e2f496f88bd]: Word in reg. 13(2)(f) omitted (19.12.2024) by virtue of The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(f)(iv)

Designated independent authority

4A

• (1) The Secretary of State must by direction designate a person as the designated independent authority in relation to the PIU.

• (2) The person for the time being designated must be a person in relation to whom the Secretary of State is satisfied that the requirements of paragraph (3) are met.

• (3) Those requirements are that the person—

• (a) does not carry out relevant PNR data processing,

• (b) acts independently of any person carrying out relevant PNR data processing, and

• (c) has sufficient expertise and knowledge and has had appropriate training to exercise the functions of the designated independent authority under these Regulations.

• (4) In paragraph (3), relevant PNR data processing is processing of PNR data otherwise than in exercise of the functions of the designated independent authority under these Regulations.

• (5) The PIU must make EU PNR data available to the designated independent authority for the purposes of the authority's functions under these Regulations.

• (6) The designated independent authority may process EU PNR data for the purposes of exercising the authority's functions under these Regulations.

Requests for PNR data made by the PIU

Requests for PNR data made by the PIU

10

• (1) Any request made by the PIU to an EU PIU for PNR information must be—

• (a) made only for the purpose described in regulation 6(3)(a),

• (b) made in respect of a specific case, and

• (c) duly reasoned.

• (2) Any request made by the PIU to a third country competent authority for PNR information must be—

• (a) made only for a purpose described in regulation 6(3),

• (b) made in respect of a specific case, and

• (c) duly reasoned.

Requests for PNR data made by a UK competent authority ...

Transfers of PNR data to an EU PIU

11A

• (1) The PIU must transfer PNR information to an EU PIU in a specific case, as soon as possible, where—

• (a) the EU PIU has made a duly reasoned request for the PNR information, and

• (b) the PIU is satisfied that it is necessary to transfer that PNR information for the purpose described in regulation 6(3)(a).

• (2) The PIU must transfer analytical information containing PNR data to an EU PIU in a specific case, as soon as possible, where the PIU considers that it is necessary to transfer that analytical information for the purpose described in regulation 6(3)(a).

Transfers of PNR data to Europol and Eurojust

11B

• (1) The PIU must transfer PNR information to Europol or Eurojust in a specific case, as soon as possible, where—

• (a) Europol or Eurojust has made a duly reasoned request for the PNR information, and

• (b) the PIU is satisfied that it is necessary to transfer that PNR information for the purpose described in regulation 6(3)(a).

• (2) The PIU must transfer analytical information containing PNR data to Europol or Eurojust in a specific case, as soon as possible, where the PIU considers that it is necessary to transfer that analytical information for the purpose described in regulation 6(3)(a).

Transfers of PNR data to third country competent authorities

Period of data retention and depersonalisation

Use and transfer of EU PNR data by the PIU: further provision

13A

• (1) The PIU may not use or transfer EU PNR data unless paragraph (2), (3), (4) or (5) applies.

• (2) This paragraph applies where the PIU processes the EU PNR data for the purposes of security and border control checks.

• (3) This paragraph applies if the designated independent authority has given consent for the use or transfer of the EU PNR data.

• (4) This paragraph applies if the PIU considers that the use or transfer of the EU PNR data is necessary in an urgent case.

• (5) This paragraph applies if the PIU considers that the use of the EU PNR data is necessary for the purpose of developing, or verifying the accuracy of, the pre-determined criteria referred to in regulation 6(5).

• (6) Where the PIU—

• (a) uses EU PNR data as mentioned in paragraph (3) or (4), or

• (b) transfers EU PNR data to an EU PIU, Europol, Eurojust or a third country competent authority,

the PIU must notify the person to whom the data relates, so far as it is reasonably practicable to do so.

• (7) Where the PIU transfers EU PNR data to a UK competent authority, the UK competent authority must notify the person to whom the data relates, so far as it is reasonably practicable to do so.

• (8) A notification under paragraph (6) or (7) must—

• (a) be in writing,

• (b) be made within a reasonable period, and

• (c) provide information about the procedures available for seeking redress of any grievance relating to the use or transfer.

• (9) A notification need not be made under paragraph (6) or (7) during any period when the PIU or the UK competent authority (as the case may be) considers that notifying the person would, or would be likely to, prejudice any ongoing investigations.

• (10) Nothing in paragraphs (2) to (5) affects the operation of regulation 6(2).

Protection of personal data

Supervisory authority

Application of other data protection enactments

Requests for PNR data made by the PIU

Requests for PNR data made by a UK competent authority ...

Transfers of PNR data to an EU PIU

Transfers of PNR data to Europol and Eurojust

Transfers of PNR data to third country competent authorities

Period of data retention and depersonalisation

Use and transfer of EU PNR data by the PIU: further provision

Restricted EU PNR data: further provision

13B

• (1) For the purposes of this regulation, EU PNR data is “restricted EU PNR data” if it relates to a person arriving in the United Kingdom who—

• (a) is not a UK national, and

• (b) resides outside the United Kingdom.

• (2) For the purposes of this regulation, restricted EU PNR data relating to a person is subject to deletion if—

• (a) the PIU, acting as such, knows that the person has left the United Kingdom, or

• (b) the period for which the person is permitted to stay in the United Kingdom has expired.

• (3) But restricted EU PNR data is not subject to deletion—

• (a) if, on the basis of a risk assessment based on objectively established criteria, the PIU considers that retention of the restricted EU PNR data is necessary for the purpose described in regulation 6(3)(a), or

• (b) where the restricted EU PNR data is used in the context of specific cases for a purpose described in regulation 6(3).

• (4) The PIU must permanently delete restricted EU PNR data that is subject to deletion as soon as possible.

• (5) The PIU must ensure that the operation of paragraph (3)(a) is reviewed annually by the designated independent authority.

• (6) In this regulation, “UK national” means—

• (a) a British citizen,

• (b) a person who is a British subject by virtue of Part 4 of the British Nationality Act 1981 and who has a right of abode in the United Kingdom, or

• (c) a person who is a British overseas territories citizen by virtue of a connection to Gibraltar.

Protection of personal data

Supervisory authority

Application of other data protection enactments