{
  "url": "https://openlegislation.uk/eu-decision-2004-535",
  "json_url": "https://openlegislation.uk/eu-decision-2004-535.json",
  "id": "eudn/2004/535",
  "title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "short_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (2004/535/EC)",
  "long_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "citation": "EU Decision 2004/535",
  "type": "eudn",
  "year": "2004",
  "number": "535",
  "version": "current",
  "date": "2004-05-14",
  "revised": false,
  "valid_from": null,
  "extent": "E+W+S+N.I.",
  "unapplied_effects": 0,
  "provisions": [
    {
      "path": "introduction",
      "kind": "introduction",
      "number": null,
      "heading": "Introductory text",
      "url": "https://openlegislation.uk/eu-decision-2004-535/introduction",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/1",
      "kind": "article",
      "number": "1",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/2",
      "kind": "article",
      "number": "2",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/3",
      "kind": "article",
      "number": "3",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/4",
      "kind": "article",
      "number": "4",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/5",
      "kind": "article",
      "number": "5",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/6",
      "kind": "article",
      "number": "6",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/7",
      "kind": "article",
      "number": "7",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/8",
      "kind": "article",
      "number": "8",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/article-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "signature",
      "kind": "signature",
      "number": null,
      "heading": "Signature",
      "url": "https://openlegislation.uk/eu-decision-2004-535/signature",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "annex",
      "kind": "annex",
      "number": null,
      "heading": "UNDERTAKINGS OF THE DEPARTMENT OF HOMELAND SECURITY BUREAU OF CUSTOMS AND BORDER PROTECTION (CBP)",
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "annex/division/1",
      "kind": "division",
      "number": null,
      "heading": "Legal authority to obtain PNR",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/1/division/1",
      "kind": "division",
      "number": "1",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-1/division-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/1"
    },
    {
      "path": "annex/division/2",
      "kind": "division",
      "number": null,
      "heading": "Use of PNR data by CBP",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/2/division/2",
      "kind": "division",
      "number": "2",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-2/division-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/2"
    },
    {
      "path": "annex/division/2/division/3",
      "kind": "division",
      "number": "3",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-2/division-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/2"
    },
    {
      "path": "annex/division/3",
      "kind": "division",
      "number": null,
      "heading": "Data requirements",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/3/division/4",
      "kind": "division",
      "number": "4",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/5",
      "kind": "division",
      "number": "5",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/6",
      "kind": "division",
      "number": "6",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/7",
      "kind": "division",
      "number": "7",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/8",
      "kind": "division",
      "number": "8",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/4",
      "kind": "division",
      "number": null,
      "heading": "Treatment of ‘sensitive’ data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/4/division/9",
      "kind": "division",
      "number": "9",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-4/division-9",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/4"
    },
    {
      "path": "annex/division/4/division/10",
      "kind": "division",
      "number": "10",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-4/division-10",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/4"
    },
    {
      "path": "annex/division/4/division/11",
      "kind": "division",
      "number": "11",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-4/division-11",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/4"
    },
    {
      "path": "annex/division/5",
      "kind": "division",
      "number": null,
      "heading": "Method of accessing PNR data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/5/division/12",
      "kind": "division",
      "number": "12",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-5/division-12",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/5/division/13",
      "kind": "division",
      "number": "13",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-5/division-13",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/5/division/14",
      "kind": "division",
      "number": "14",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-5/division-14",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/6",
      "kind": "division",
      "number": null,
      "heading": "Storage of PNR data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/6/division/15",
      "kind": "division",
      "number": "15",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-6/division-15",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/6"
    },
    {
      "path": "annex/division/7",
      "kind": "division",
      "number": null,
      "heading": "CBP computer system security",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/7/division/16",
      "kind": "division",
      "number": "16",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-16",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/17",
      "kind": "division",
      "number": "17",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-17",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/18",
      "kind": "division",
      "number": "18",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-18",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/19",
      "kind": "division",
      "number": "19",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-19",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/20",
      "kind": "division",
      "number": "20",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-20",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/21",
      "kind": "division",
      "number": "21",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-21",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/22",
      "kind": "division",
      "number": "22",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-22",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/23",
      "kind": "division",
      "number": "23",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-23",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/8",
      "kind": "division",
      "number": null,
      "heading": "CBP treatment and protection of PNR data",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/8/division/24",
      "kind": "division",
      "number": "24",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-8/division-24",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/8"
    },
    {
      "path": "annex/division/8/division/25",
      "kind": "division",
      "number": "25",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-8/division-25",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/8"
    },
    {
      "path": "annex/division/8/division/26",
      "kind": "division",
      "number": "26",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-8/division-26",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/8"
    },
    {
      "path": "annex/division/8/division/27",
      "kind": "division",
      "number": "27",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-8/division-27",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/8"
    },
    {
      "path": "annex/division/9",
      "kind": "division",
      "number": null,
      "heading": "Transfer of PNR data to other government authorities",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/9/division/28",
      "kind": "division",
      "number": "28",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-28",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/29",
      "kind": "division",
      "number": "29",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-29",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/30",
      "kind": "division",
      "number": "30",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-30",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/31",
      "kind": "division",
      "number": "31",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-31",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/32",
      "kind": "division",
      "number": "32",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-32",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/33",
      "kind": "division",
      "number": "33",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-33",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/34",
      "kind": "division",
      "number": "34",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-34",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/9/division/35",
      "kind": "division",
      "number": "35",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-35",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/10",
      "kind": "division",
      "number": null,
      "heading": "Notice, access and opportunities for redress for PNR data subjects",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/10/division/36",
      "kind": "division",
      "number": "36",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-36",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/37",
      "kind": "division",
      "number": "37",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-37",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/38",
      "kind": "division",
      "number": "38",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-38",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/39",
      "kind": "division",
      "number": "39",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-39",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/40",
      "kind": "division",
      "number": "40",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-40",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/41",
      "kind": "division",
      "number": "41",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-41",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/42",
      "kind": "division",
      "number": "42",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-42",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/11",
      "kind": "division",
      "number": null,
      "heading": "Compliance issues",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/11/division/43",
      "kind": "division",
      "number": "43",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-11/division-43",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/11"
    },
    {
      "path": "annex/division/11/division/44",
      "kind": "division",
      "number": "44",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-11/division-44",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/11"
    },
    {
      "path": "annex/division/12",
      "kind": "division",
      "number": null,
      "heading": "Reciprocity",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/12/division/45",
      "kind": "division",
      "number": "45",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-12/division-45",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/12"
    },
    {
      "path": "annex/division/13",
      "kind": "division",
      "number": null,
      "heading": "Review and termination of Undertakings",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/13/division/46",
      "kind": "division",
      "number": "46",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-13/division-46",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/13"
    },
    {
      "path": "annex/division/14",
      "kind": "division",
      "number": null,
      "heading": "No private right or precedent created",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/14/division/47",
      "kind": "division",
      "number": "47",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-14/division-47",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/48",
      "kind": "division",
      "number": "48",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-14/division-48",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/2",
      "kind": "annex",
      "number": "ATTACHMENT A",
      "heading": "PNR data elements required by CBP from air carriers",
      "url": "https://openlegislation.uk/eu-decision-2004-535/annex-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    }
  ],
  "outstanding_effects": [],
  "made_under": [],
  "changes_made_to": 0,
  "changes_made_to_url": "https://openlegislation.uk/eu-decision-2004-535/changes.json",
  "changes_made_by": 0,
  "changes_made_by_url": "https://openlegislation.uk/eu-decision-2004-535/changes/by-it.json",
  "instruments_made_under": 0,
  "instruments_made_under_url": "https://openlegislation.uk/eu-decision-2004-535/instruments.json",
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2004/535",
    "retrieved_at": "2026-11-01T15:18:11.175547+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}