{
  "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-38",
  "json_url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-10/division-38.json",
  "legislation": "eudn/2004/535",
  "legislation_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2004-535",
  "path": "annex/division/10/division/38",
  "kind": "division",
  "number": "38",
  "heading": null,
  "text": "In certain exceptional circumstances, CBP may exercise its authority under FOIA to deny or postpone disclosure of all (or, more likely, part) of the PNR record to a first party requester, pursuant to title 5, United States Code, section 552(b) (e.g. if disclosure under FOIA ‘could reasonably be expected to interfere with enforcement proceedings’ or ‘would disclose techniques and procedures for law enforcement investigations (...) (which) could reasonably be expected to risk circumvention of the law’). Under FOIA, any requester has the authority to administratively and judicially challenge CBP’s decision to withhold information (see 5 U.S.C. 552(a)(4)(B); 19 CFR 103.7 to 103.9).",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2004/535/annex/division/10/division/38",
    "retrieved_at": "2026-11-01T15:18:11.175547+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}