Regulation 7 Processing of PNR data by a UK competent authority

(1)

A UK competent authority must not—

(a)

process F1PNR information for purposes other than F2a purpose described in regulation 6(3), or

(b)

take any decision which produces an adverse legal effect on a person or otherwise significantly affects a person—

(i)

only by reason of the automated processing of PNR data, or

(ii)

on the basis of any of the matters described in regulation 6(5)(c) in relation to that person.

(2)

Paragraph (1)(a) is without prejudice to the ability of a UK competent authority to exercise its functions F3—

(a)

in circumstances where other offences, or indications of such offences, are detected during the course of any enforcement action taken further to the processing of PNR dataF4, or

(b)

in relation to public health.

F5(3)

Where the PIU transfers PNR information under regulation 6(9), the UK competent authority must not transfer the PNR information to another person without the consent of the PIU.

Annotations

Textual amendments

F1: Words in reg. 7(1)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F2: Words in reg. 7(1)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F3: Words in reg. 7(2) renumbered as reg. 7(2)(a) (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(3)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F4: Reg. 7(2)(b) and word inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(3)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F5: Reg. 7(3) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(4) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)