Division 35

Access, use and disclosure of API and PNR information is governed by the Privacy Act, the Access to Information Act as well as by section 107 of the Customs Act and the administrative policy described in section 37 of these Commitments, which reflect the protections and safeguards outlined in the present document. Section 160 of the Customs Act and internal codes of conduct provide for criminal and other sanctions in the event that these policies are not respected and, as noted above, the Privacy Commissioner is empowered under the Privacy Act to commence an investigation in respect of the disclosure of personal information.