{
  "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-4/division-11",
  "json_url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-4/division-11.json",
  "legislation": "eudn/2004/535",
  "legislation_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2004-535",
  "path": "annex/division/4/division/11",
  "kind": "division",
  "number": "11",
  "heading": null,
  "text": "Until such automated filters can be implemented CBP represents that it does not and will not use ‘sensitive’ PNR data and will undertake to delete ‘sensitive’ data from any discretionary disclosure of PNR under paragraphs 28 to 34.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "footnote",
      "label": "f1",
      "text": "Prior to CBP’s implementation of automated filters (as referenced in paragraph 10 hereof), if ‘sensitive’ data exists in a PNR which is the subject of a non-discretionary disclosure by CBP as described in paragraph 35 hereof, CBP will make every effort to limit the release of ‘sensitive’ PNR data, consistent with US law."
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2004/535/annex/division/4/division/11",
    "retrieved_at": "2026-11-01T15:18:11.175547+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}