# Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (Text with EEA relevance) (2006/253/EC), Division 8: Where the API and PNR information relates to a person who is not the subject of an investigation in Canada for a purpose described in section 2, it will be retained in the PAXIS system for a maximum of 3.5 years. During this period, the information will be retained in an increasingly de-personalized manner, as follows:

Extent: E+W+S+N.I.

(a) From initial receipt to 72 hours, all available API and PNR information will be accessible only to a limited number of CBSA targetters and intelligence officers, who will use the information to identify those who require closer questioning or examination on arrival in Canada, for one of the purposes set out in section 2.
(b) After 72 hours to the end of two years from receipt, a person’s PNR record will be retained in the PAXIS system but accessible only by CBSA intelligence officers located at an international airport in Canada or at CBSA national headquarters in Ottawa. The name of the person to whom the information relates will be unavailable for viewing by these officials unless it is required in order to proceed with an investigation in Canada for one of the purposes described in section 2. The PNR record will be re-personalized only where the official reasonably believes that the name of the person is required in order to proceed with the investigation. During this period, the depersonalized information will be used by CBSA intelligence analysts for trend analysis and the development of future risk indicators related to the purposes set out in section 2.
(c) After two years from receipt, the PNR record will be retained in the PAXIS system for a further maximum period of 1.5 years, but all data elements which could serve to identify the person to whom the information relates will be available for viewing only if approved by the President of the CBSA for a purpose described in section 2. During this period, the depersonalized information will be used by CBSA intelligence analysts for trend analysis and the development of future risk indicators related to the purposes set out in section 2.
(d) API information will be stored separately from PNR information in the PAXIS system. It will be retained in the PAXIS system for a maximum of 3.5 years but during that period, API information relating to a person will not be used to gain access to PNR information about the same person, unless the PNR record is re-personalized in the circumstances described in paragraph b.

---
Source: https://www.legislation.gov.uk/eudn/2006/253/annex/division/5/division/8 (the official version)
Page: https://openlegislation.uk/eu-decision-2006-253/annex/division-5/division-8
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.