{
  "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-21",
  "json_url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-7/division-21.json",
  "legislation": "eudn/2004/535",
  "legislation_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2004-535",
  "path": "annex/division/7/division/21",
  "kind": "division",
  "number": "21",
  "heading": null,
  "text": "Unauthorised access by CBP personnel to air carrier reservation systems or the CBP computerised system which stores PNR is subject to strict disciplinary action (which may include termination of employment) and may result in criminal sanctions being imposed (fines, imprisonment of up to one year, or both) (see title 18, United States Code, section 1030).",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2004/535/annex/division/7/division/21",
    "retrieved_at": "2026-11-01T15:18:11.175547+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}