In this proposal, the Commission lays down common rules for EU Member States to set up national PNR systems.
The Commission proposes:
1. That air carriers transfer data on passengers on international flights held in the carriers' reservation systems to a dedicated unit in the Member State of arrival or departure. Member States will analyse and retain the data for the purpose of preventing, detecting, investigating and prosecuting serious crime and terrorist offences.
2. Strong protection of privacy and personal data. PNR data may not be used for any purpose except fighting serious crime and terrorist offences (strict purpose limitation). Law enforcement authorities in Member States must make the data anonymous 1 month after the flight, and data must not be retained for more than five years in total (short retention period). Sensitive data that could reveal racial or ethnic origin, political opinions, or religious beliefs may never be transferred by air carriers to, or in any way used by, the Member States. Member States will not be able to access the databases of air carriers, the data must be requested and sent to them by the air carriers concerned (‘push method’). Member States must set up dedicated units to handle the data and keep it secure and ensure those units are monitored by an independent supervisory (data protection) authority. Clear rules on passengers' right to accurate information about the collection of PNR data are also introduced, as well as rules giving passengers the right to access, rectify, and delete their data, and to compensation and judicial remedies.
3. Clear rules on how data should be transferred, for example how many times data may be transferred by the air carriers to Member States and the security of such transfers, aimed at limiting the impact on privacy and minimising the costs for air carriers.
"This proposal for an EU PNR Directive is an important part of EU security policy. Common EU rules are necessary to fight serious crime such as drugs smuggling and people trafficking as well as terrorism, and to ensure that passengers' privacy is respected and their rights fully protected in all Member States. The proposal requires Member States to anonymise all PNR data that is collected", said Cecilia Malmström, European Commissioner for Home Affairs.