# Commission Decision of 6 September 2005 on the adequate protection of personal data contained in the Passenger Name Record of air passengers transferred to the Canada Border Services Agency (notified under document number C(2005) 3248) (Text with EEA relevance) (2006/253/EC), Division 19

Extent: E+W+S+N.I.

API and PNR information retained in an enforcement database described in section 9 can be shared in accordance with treaty obligations under a Customs Mutual Assistance Agreement or a Mutual Legal Assistance Agreement. In this case, API and PNR elements will only be shared on a case by case basis and provided that the CBSA is in possession of evidence that directly links the request to the investigation or prevention of crimes referred to in section 2 and only to the extent that the data elements provided are strictly necessary to pursue the specific enquiry in question.

---
Source: https://www.legislation.gov.uk/eudn/2006/253/annex/division/7/division/19 (the official version)
Page: https://openlegislation.uk/eu-decision-2006-253/annex/division-7/division-19
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.