{
  "url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-35",
  "json_url": "https://openlegislation.uk/eu-decision-2006-253/annex/division-14/division-35.json",
  "legislation": "eudn/2006/253",
  "legislation_title": "Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (Text with EEA relevance) (2006/253/EC)",
  "legislation_url": "https://openlegislation.uk/eu-decision-2006-253",
  "path": "annex/division/14/division/35",
  "kind": "division",
  "number": "35",
  "heading": null,
  "text": "Access, use and disclosure of API and PNR information is governed by the Privacy Act, the Access to Information Act as well as by section 107 of the Customs Act and the administrative policy described in section 37 of these Commitments, which reflect the protections and safeguards outlined in the present document. Section 160 of the Customs Act and internal codes of conduct provide for criminal and other sanctions in the event that these policies are not respected and, as noted above, the Privacy Commissioner is empowered under the Privacy Act to commence an investigation in respect of the disclosure of personal information.",
  "extent": "E+W+S+N.I.",
  "status": null,
  "version": "current",
  "annotations": [],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/eudn/2006/253/annex/division/14/division/35",
    "retrieved_at": "2026-11-01T15:17:38.864472+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}