Regulation 6 Processing of PNR data by the PIU

(1)

Where the information provided by F1a carrier pursuant to a requirement under either of the provisions set out in regulation F25(1) includes F3... data other than PNR data, the PIU must delete the additional data F4... upon receipt.

(2)

The PIU must not process PNR data except for one of the purposes described in paragraph (3) F5, subject to regulation 4A(6).

F6(3)

The purposes are—

(a)

preventing, detecting, investigating and prosecuting terrorist offences or serious crime, and

(b)

protecting the vital interests of persons.

(4)

Where the PIU compares PNR data against a database, the PIU must ensure that the database is—

(a)

reliable and up to date, and

(b)

used for a purpose described in paragraph (3).

(5)

F7Where the PIU processes PNR data against pre-determined criteria, the PIU must ensure that the pre-determined criteria F8... are—

(a)

F9reliable, targeted, proportionate and specific;

(b)

set and regularly reviewed in cooperation with the UK competent authorities, and

(c)

not based on a person's race or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, health, sexual life or sexual orientation.

F10(5A)

The PIU must not take any decision which produces an adverse legal effect on a person or otherwise significantly affects a person—

(a)

only by reason of the automated processing of PNR data, or

(b)

on the basis of any of the matters described in paragraph (5)(c) in relation to that person.

F11(6)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(7)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(8)

. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

(9)

The PIU must not transfer F12PNR information to a UK competent authority F13except where it does so on a case by case basis where it is satisfied that—

(a)

it is necessary to transfer that PNR information for a purpose described in paragraph (3); and

(b)

the UK competent authority has arrangements in place for the protection of personal data that are equivalent to the arrangements for the protection of personal data required of the PIU under these Regulations.

(10)

The processing and analysis of PNR data by the PIU must be carried out exclusively within a secure location within the territory of the United Kingdom.

Annotations

Textual amendments

F1: Word in reg. 6(1) substituted (19.12.2024) by The Immigration and Police (Passenger, Crew and Service Information) Order 2024 (S.I. 2024/1227), arts. 1(2), 6(2)(d)
F2: Word in reg. 6(1) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F3: Word in reg. 6(1) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F4: Word in reg. 6(1) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(2)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F5: Words in reg. 6(2) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(3) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F6: Reg. 6(3)(4) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(4) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F7: Words in reg. 6(5) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(5)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F8: Words in reg. 6(5) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(5)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F9: Word in reg. 6(5)(a) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(5)(c) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F10: Reg. 6(5A) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(6) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F11: Reg. 6(6)-(8) omitted (31.12.2020) by virtue of European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(7) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F12: Words in reg. 6(9) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(8)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F13: Words in reg. 6(9) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 6(8)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)