# Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC), Division 8

Extent: E+W+S+N.I.

CBP may transfer PNRs on a bulk basis to the Transportation Security Administration (TSA) for purposes of TSA’s testing of its Computer Assisted Passenger Pre-screening System II (CAPPS II). Such transfers will not be made until PNR data from US domestic flights have first been authorised for testing. PNR data transferred under this provision will not be retained by TSA or any other parties directly involved in the tests beyond the period necessary for testing purposes, or be transferred to any other third party. The purpose of the processing is strictly limited to testing the CAPPS II system and interfaces and, except in emergency situations involving the positive identification of a known terrorist or individual with established connections to terrorism, is not to have any operational consequences. Under the provision requiring an automated filtering method described in paragraph 10, CBP will have filtered and deleted ‘sensitive’ data before transferring any PNRs to TSA on a bulk basis under this paragraph.

---
Source: https://www.legislation.gov.uk/eudn/2004/535/annex/division/3/division/8 (the official version)
Page: https://openlegislation.uk/eu-decision-2004-535/annex/division-3/division-8
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.