# Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC), Division 26

Extent: E+W+S+N.I.

CBP regulations (title 19, Code of Federal Regulations, section 103.12), which govern the processing of requests for information (such as PNR data) pursuant to the FOIA, specifically provide that (subject to certain limited exceptions in the case of requests by the data subject) the disclosure requirements of the FOIA are not applicable to CBP records relating to: 1. confidential commercial information; 2. material involving personal privacy where the disclosure would constitute a clearly unwarranted invasion of personal privacy; and 3. information compiled for law enforcement purposes, where disclosure could reasonably be expected to constitute an unwarranted invasion of personal privacy.

---
Source: https://www.legislation.gov.uk/eudn/2004/535/annex/division/8/division/26 (the official version)
Page: https://openlegislation.uk/eu-decision-2004-535/annex/division-8/division-26
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.