Division 9

Where the API and PNR information relates to a person who is the subject of an investigation in Canada for a purpose described in section 2, it will be placed in an enforcement database of the CBSA. These databases contain only information with respect to persons who have been investigated or subjected to an enforcement action under CBSA legislation. Access to these databases is made available only to those CBSA officials whose duties require such access and is closely monitored. API and PNR information that is transferred to such an enforcement database will be retained in that system for no longer than is necessary, and in any case for a period of no more than six years, at which time it will be destroyed unless it is required to be retained for an additional period by virtue of the Privacy Act or the Access to Information Act, as explained in paragraph 10 b.