{
  "url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-32",
  "json_url": "https://openlegislation.uk/eu-decision-2004-535/annex/division-9/division-32.json",
  "legislation": "eudn/2004/535",
  "legislation_title": "Commission Decision of 14 May 2004 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the United States’ Bureau of Customs and Border Protection (notified under document number C(2004) 1914) (Text with EEA relevance) (2004/535/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2004-535",
  "path": "annex/division/9/division/32",
  "kind": "division",
  "number": "32",
  "heading": null,
  "text": "Each disclosure of PNR data by CBP will be conditioned upon the receiving agency’s treatment of this data as confidential commercial information and law enforcement sensitive, confidential personal information of the data subject, as identified in paragraphs 25 and 26 hereof, which should be treated as exempt from disclosure under the Freedom of Information Act (5 U.S.C. 552). Further, the recipient agency will be advised that further disclosure of such information is not permitted without the express prior approval of CBP. CBP will not authorise any further transfer of PNR data for purposes other than those identified in paragraphs 29, 34 or 35 herein.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2004/535/annex/division/9/division/32",
    "retrieved_at": "2026-11-01T15:18:11.175547+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}