Division Retention of, and access, to API and PNR information
United Kingdom
- 8Where the API and PNR information relates to a person who is not the subject of an investigation in Canada for a purpose described in section 2, it will be retained in the PAXIS system for a maximum of 3.5 years. During this period, the information will be retained in an increasingly de-personalized manner, as follows:
- 9Division 9
- 10Where personal information is used by the CBSA for purposes of making a decision affecting the interests of the data subject to whom it relates, it must be retained by the CBSA for a period of two years from the date of such use in order that the data subject may access the information upon which such a decision has been made, unless the individual consents to its earlier disposal or where a request for access to the information has been received, until such time as the individual has had the opportunity to exercise all his rights under the Privacy Act or the Access to Information Act.
- 11Division 11