{
  "url": "https://openlegislation.uk/passenger-name-record-data-and-miscellaneous-amendments-regulations-2018/regulation-12",
  "json_url": "https://openlegislation.uk/passenger-name-record-data-and-miscellaneous-amendments-regulations-2018/regulation-12.json",
  "legislation": "uksi/2018/598",
  "legislation_title": "The Passenger Name Record Data and Miscellaneous Amendments Regulations 2018",
  "legislation_url": "https://openlegislation.uk/passenger-name-record-data-and-miscellaneous-amendments-regulations-2018",
  "path": "regulation/12",
  "kind": "regulation",
  "number": "12",
  "heading": "Transfers of PNR data to third country competent authorities",
  "text": "(1) Paragraphs (1A) to (2A) apply to PNR information that is not EU PNR information.\n(1A) The PIU must not transfer that PNR information to a third country competent authority except where it does so on a case by case basis where paragraph (2) or (2A) applies.\n(2) This paragraph applies where—\n(a) the request from the non-UK competent authority is duly reasoned;\n(b) the PIU is satisfied that the transfer is necessary for a purpose described in regulation 6(3), and\n(c) the third country competent authority agrees to transfer the information to another third country competent authority only where it is strictly necessary for the purposes described in sub-paragraph (b).\n(2A) This paragraph applies where—\n(a) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .\n(b) the PIU considers it necessary for a purpose described in regulation 6(3).\n(2B) The PIU must not transfer EU PNR information to a third country competent authority except where it does so on a case by case basis where—\n(a) paragraph (2C) applies and the PIU is satisfied that it is necessary to transfer the EU PNR information for a purpose described in regulation 6(3), or\n(b) paragraph (2D) applies.\n(2C) This paragraph applies where—\n(a) there is an agreement in force between the third country and the EU that provides for a level of protection of personal data that is equivalent to the level of protection required under the Agreement, or\n(b) the European Commission has decided that the third country ensures an adequate level of protection of personal data, and that decision has not been repealed or suspended, or amended in a way that demonstrates that the Commission no longer considers there to be an adequate level of protection of personal data.\n(2D) This paragraph applies where—\n(a) the PIU considers that it is necessary to transfer the EU PNR information—\n(i) for the prevention or investigation of an immediate and serious threat to public security, or\n(ii) to protect the vital interests of persons, and\n(b) the third country competent authority provides a written confirmation to the PIU that the EU PNR information will be subject to a level of protection that is equivalent to the level of protection under these Regulations and the data protection legislation.\n(2E) Where the PIU transfers EU PNR information that it received from an EU PIU to a third country competent authority under this regulation, the PIU must notify that EU PIU as soon as possible.\n(2F) Where, under this regulation, the PIU transfers to a third country competent authority EU PNR data that originated in a member State, and was provided by a carrier, the PIU must notify the EU PIU for that member State as soon as possible.\n(3) In the case of PNR data that has been depersonalised through the masking out of data elements pursuant to regulation 13(2), the PIU must not transfer the unmasked PNR data except where—\n(a) the PIU is satisfied that the disclosure is necessary for a purpose described in regulation 6(3), and\n(b) the disclosure is approved by the officer referred to in regulation 13(4)(b).\n(4) The PIU must inform the data protection officer each time PNR information is transferred to a third country competent authority.",
  "extent": null,
  "status": null,
  "version": "current",
  "annotations": [
    {
      "type": "F",
      "label": "F1",
      "text": "Reg. 12(1)-(2A) substituted for reg. 12(1)(2) (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(b) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F2",
      "text": "Reg. 12(1)(1A) substituted for reg. 12(1) (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(3) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F3",
      "text": "Words in reg. 12(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F4",
      "text": "Words in reg. 12(2)(b) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F5",
      "text": "Words in reg. 12(2)(c) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(d) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F6",
      "text": "Words in reg. 12(2) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(4)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F7",
      "text": "Words in reg. 12(2A) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F8",
      "text": "Reg. 12(2A)(a) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F9",
      "text": "Words in reg. 12(2A) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(5)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F10",
      "text": "Reg. 12(2B)-(2F) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(6) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F11",
      "text": "Word in reg. 12(2F) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(e)"
    },
    {
      "type": "F",
      "label": "F12",
      "text": "Words in reg. 12(3)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(7) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F13",
      "text": "Words in reg. 12(4) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(8)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F14",
      "text": "Words in reg. 12(4) substituted (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(c) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F15",
      "text": "Words in reg. 12(4) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(8)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F16",
      "text": "Word in reg. 12 heading inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    },
    {
      "type": "F",
      "label": "F17",
      "text": "Words in reg. 12 heading substituted (31.12.2020) by The Law Enforcement and Security (Amendment) (EU Exit) Regulations 2019 (S.I. 2019/742), regs. 1, 104(7)(a) (with regs. 106A, 106B) (as inserted by S.I. 2020/1408, regs. 1, 31); 2020 c. 1, Sch. 5 para. 1(1)"
    },
    {
      "type": "F",
      "label": "F18",
      "text": "Words in reg. 12 heading substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 11(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)"
    }
  ],
  "outstanding_effects": [],
  "provenance": {
    "source": "legislation.gov.uk",
    "source_url": "https://www.legislation.gov.uk/uksi/2018/598/regulation/12",
    "retrieved_at": "2026-10-28T22:57:55.853278+00:00"
  },
  "licence": "Open Government Licence v3.0",
  "licence_url": "https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/",
  "attribution": "Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives."
}