{
  "url": "https://openlegislation.uk/eu-decision-2006-253",
  "json_url": "https://openlegislation.uk/eu-decision-2006-253.json",
  "id": "eudn/2006/253",
  "title": "Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (Text with EEA relevance) (2006/253/EC)",
  "short_title": "Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (2006/253/EC)",
  "long_title": "Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (Text with EEA relevance) (2006/253/EC)",
  "citation": "EU Decision 2006/253",
  "type": "eudn",
  "year": "2006",
  "number": "253",
  "version": "current",
  "date": "2005-09-06",
  "revised": false,
  "valid_from": null,
  "extent": "E+W+S+N.I.",
  "unapplied_effects": 0,
  "provisions": [
    {
      "path": "introduction",
      "kind": "introduction",
      "number": null,
      "heading": "Introductory text",
      "url": "https://openlegislation.uk/eu-decision-2006-253/introduction",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/1",
      "kind": "article",
      "number": "1",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/2",
      "kind": "article",
      "number": "2",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/3",
      "kind": "article",
      "number": "3",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/4",
      "kind": "article",
      "number": "4",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/5",
      "kind": "article",
      "number": "5",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/6",
      "kind": "article",
      "number": "6",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/7",
      "kind": "article",
      "number": "7",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "article/8",
      "kind": "article",
      "number": "8",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/article-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "signature",
      "kind": "signature",
      "number": null,
      "heading": "Signature",
      "url": "https://openlegislation.uk/eu-decision-2006-253/signature",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "annex",
      "kind": "annex",
      "number": null,
      "heading": "COMMITMENTS BY THE CANADA BORDER SERVICE AGENCY IN RELATION TO THE APPLICATION OF ITS PNR PROGRAM",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": null
    },
    {
      "path": "annex/division/1",
      "kind": "division",
      "number": null,
      "heading": "Legal authority to collect API and PNR information",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/1/division/1",
      "kind": "division",
      "number": "1",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-1/division-1",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/1"
    },
    {
      "path": "annex/division/2",
      "kind": "division",
      "number": null,
      "heading": "Purpose for which API and PNR information is collected",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/2/division/2",
      "kind": "division",
      "number": "2",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-2/division-2",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/2"
    },
    {
      "path": "annex/division/2/division/3",
      "kind": "division",
      "number": "3",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-2/division-3",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/2"
    },
    {
      "path": "annex/division/3",
      "kind": "division",
      "number": null,
      "heading": "API and PNR information collected",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/3/division/4",
      "kind": "division",
      "number": "4",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-3/division-4",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/5",
      "kind": "division",
      "number": "5",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-3/division-5",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/3/division/6",
      "kind": "division",
      "number": "6",
      "heading": "The CBSA will consult and agree with the European Commission regarding revision of the 25 required PNR data elements set out in Attachment A, prior to effecting any such revision,",
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-3/division-6",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/3"
    },
    {
      "path": "annex/division/4",
      "kind": "division",
      "number": null,
      "heading": "Method of accessing API and PNR information",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/4/division/7",
      "kind": "division",
      "number": "7",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-4/division-7",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/4"
    },
    {
      "path": "annex/division/5",
      "kind": "division",
      "number": null,
      "heading": "Retention of, and access, to API and PNR information",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/5/division/8",
      "kind": "division",
      "number": "8",
      "heading": "Where the API and PNR information relates to a person who is not the subject of an investigation in Canada for a purpose described in section 2, it will be retained in the PAXIS system for a maximum of 3.5 years. During this period, the information will be retained in an increasingly de-personalized manner, as follows:",
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-5/division-8",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/5/division/9",
      "kind": "division",
      "number": "9",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-5/division-9",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/5/division/10",
      "kind": "division",
      "number": "10",
      "heading": "Where personal information is used by the CBSA for purposes of making a decision affecting the interests of the data subject to whom it relates, it must be retained by the CBSA for a period of two years from the date of such use in order that the data subject may access the information upon which such a decision has been made, unless the individual consents to its earlier disposal or where a request for access to the information has been received, until such time as the individual has had the opportunity to exercise all his rights under the Privacy Act or the Access to Information Act.",
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-5/division-10",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/5/division/11",
      "kind": "division",
      "number": "11",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-5/division-11",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/5"
    },
    {
      "path": "annex/division/6",
      "kind": "division",
      "number": null,
      "heading": "Disclosures of API and PNR information to other Canadian departments and agencies",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/6/division/12",
      "kind": "division",
      "number": "12",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-6/division-12",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/6"
    },
    {
      "path": "annex/division/6/division/13",
      "kind": "division",
      "number": "13",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-6/division-13",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/6"
    },
    {
      "path": "annex/division/6/division/14",
      "kind": "division",
      "number": "14",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-6/division-14",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/6"
    },
    {
      "path": "annex/division/6/division/15",
      "kind": "division",
      "number": "15",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-6/division-15",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/6"
    },
    {
      "path": "annex/division/7",
      "kind": "division",
      "number": null,
      "heading": "Disclosure of API and PNR information to other countries",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/7/division/16",
      "kind": "division",
      "number": "16",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-7/division-16",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/17",
      "kind": "division",
      "number": "17",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-7/division-17",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/18",
      "kind": "division",
      "number": "18",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-7/division-18",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/7/division/19",
      "kind": "division",
      "number": "19",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-7/division-19",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/7"
    },
    {
      "path": "annex/division/8",
      "kind": "division",
      "number": null,
      "heading": "Disclosure of API and PNR information in the vital interest of the data subject",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/8/division/20",
      "kind": "division",
      "number": "20",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-8/division-20",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/8"
    },
    {
      "path": "annex/division/9",
      "kind": "division",
      "number": null,
      "heading": "Notification to data subject",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/9/division/21",
      "kind": "division",
      "number": "21",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-9/division-21",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/9"
    },
    {
      "path": "annex/division/10",
      "kind": "division",
      "number": null,
      "heading": "Legal review mechanisms of the CBSA’s PNR program",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/10/division/22",
      "kind": "division",
      "number": "22",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-10/division-22",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/23",
      "kind": "division",
      "number": "23",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-10/division-23",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/24",
      "kind": "division",
      "number": "24",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-10/division-24",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/10/division/25",
      "kind": "division",
      "number": "25",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-10/division-25",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/10"
    },
    {
      "path": "annex/division/11",
      "kind": "division",
      "number": null,
      "heading": "Joint review of the CBSA’s PNR program",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/11/division/26",
      "kind": "division",
      "number": "26",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-11/division-26",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/11"
    },
    {
      "path": "annex/division/12",
      "kind": "division",
      "number": null,
      "heading": "Redress",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/12/division/1",
      "kind": "division",
      "number": null,
      "heading": "Legal Framework",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/12"
    },
    {
      "path": "annex/division/12/division/1/division/27",
      "kind": "division",
      "number": "27",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-12/division-1/division-27",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/12/division/1"
    },
    {
      "path": "annex/division/12/division/1/division/28",
      "kind": "division",
      "number": "28",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-12/division-1/division-28",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/12/division/1"
    },
    {
      "path": "annex/division/12/division/1/division/29",
      "kind": "division",
      "number": "29",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-12/division-1/division-29",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/12/division/1"
    },
    {
      "path": "annex/division/13",
      "kind": "division",
      "number": null,
      "heading": "Administrative Framework",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/13/division/30",
      "kind": "division",
      "number": "30",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-13/division-30",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/13"
    },
    {
      "path": "annex/division/13/division/31",
      "kind": "division",
      "number": "31",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-13/division-31",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/13"
    },
    {
      "path": "annex/division/13/division/32",
      "kind": "division",
      "number": "32",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-13/division-32",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/13"
    },
    {
      "path": "annex/division/14",
      "kind": "division",
      "number": null,
      "heading": "Security of Information",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/14/division/33",
      "kind": "division",
      "number": "33",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-33",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/34",
      "kind": "division",
      "number": "34",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-34",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/35",
      "kind": "division",
      "number": "35",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-35",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/36",
      "kind": "division",
      "number": "36",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-36",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/37",
      "kind": "division",
      "number": "37",
      "heading": "The CBSA’s PNR disclosure policy provides:",
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-37",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/38",
      "kind": "division",
      "number": "38",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-38",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/14/division/39",
      "kind": "division",
      "number": "39",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-39",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/14"
    },
    {
      "path": "annex/division/15",
      "kind": "division",
      "number": null,
      "heading": "Reciprocity",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/15/division/40",
      "kind": "division",
      "number": "40",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-15/division-40",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/15"
    },
    {
      "path": "annex/division/15/division/41",
      "kind": "division",
      "number": "41",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-15/division-41",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/15"
    },
    {
      "path": "annex/division/16",
      "kind": "division",
      "number": null,
      "heading": "Review and termination of commitments",
      "url": null,
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    },
    {
      "path": "annex/division/16/division/42",
      "kind": "division",
      "number": "42",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-16/division-42",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/16"
    },
    {
      "path": "annex/division/16/division/43",
      "kind": "division",
      "number": "43",
      "heading": null,
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-16/division-43",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex/division/16"
    },
    {
      "path": "annex/appendix/ATTACHMENT",
      "kind": "appendix",
      "number": "ATTACHMENT ‘A’",
      "heading": "PNR DATA ELEMENTS REQUIRED BY CBSA FROM AIR CARRIERS",
      "url": "https://openlegislation.uk/eu-decision-2006-253/annex/appendix-ATTACHMENT",
      "extent": "E+W+S+N.I.",
      "status": null,
      "parent": "annex"
    }
  ],
  "outstanding_effects": [],
  "made_under": [],
  "changes_made_to": 0,
  "changes_made_to_url": "https://openlegislation.uk/eu-decision-2006-253/changes.json",
  "changes_made_by": 0,
  "changes_made_by_url": "https://openlegislation.uk/eu-decision-2006-253/changes/by-it.json",
  "instruments_made_under": 0,
  "instruments_made_under_url": "https://openlegislation.uk/eu-decision-2006-253/instruments.json",
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2006/253",
    "retrieved_at": "2026-11-01T15:17:38.864472+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}