EU Bookmark and Share  
PNR Directive: Member States want to go beyond EU rules and share "additional information"
Follow us: | | Tweet

EU Member States are working towards implementation of the EU Passenger Name Record (PNR) Directive, which mandates the surveillance and profiling of all passengers travelling by air within, out of and into the EU. The final report of a pilot project led by Hungary on exchanging PNR data between Member States' Passenge Information Units (PIUs) shows that some Member States see the Directive as limiting their efforts to share as much data as possible with other national authorities - including those of non-EU Member States.

See: NOTE from: Hungarian delegation to: Working Party on Information Exchange and Data Protection (DAPIX): Information Managment Strategy - Action 3 - Passenger Name Records Data Exchange Pilot (PNRDEP) - Final report (10879/17, LIMITE, 28 September 2017, pdf):

"During the project, the study and subsequent discussions among participants showed that, on the one hand, some Member States would prefer to refrain themselves to share only the PNR data indicated in Annex 1 to the Directive, and, on the other hand, some would like to share additional information, e.g. analytical information obtained from PNR data, risk assessment, common profiles, supra-national targeting rules etc., since this could bring added value to the work carried out within a PIU and would be a step forward to closing the intelligence gaps between PIUs.

Therefore it was tried to separate the issues concerning to the exchange and collaboration (between PIUs).

PNR data exchange: is based on the Directive Article 9.1 and 9.2. The subject of the exchange: all data indicated in Annex I of the Directive.

Collaboration: sharing additional information, e.g. analytical information obtained from PNR data, risk assessment, common profiles, supra-national targeting rules etc. The possibility of such cooperation is not directly addressed by the Directive, but sharing all these activities could bring added value to the work conducted within the PIU as it’s a step towards closing intelligence gaps between the EU PIUs." [emphasis added]

At least one potential legal base for sharing additional data has been examined: "it was discussed, whether Council Framework Decision 2006/960/JHA could be the legal basis for risk profile sharing."

The question of sharing PNR data with non-EU Member States has also been discussed, although the "scenario has not been simulated during the project":

"Apart from the specific regulation found in international agreements concluded between the EU and respective third countries, the transfer of PNR data by Member States to third countries will be permitted only on a case-by-case basis for the purposes of preventing, detecting, investigating and prosecuting terrorist offences and serious crime and in full compliance with data protection requirements and other conditions set out in Article 11 of the Directive.

Surveyed Member States showed a common intention to share the PNR data and/or analytical information obtained from PNR data with the non-EU Member States. The majority of the Member States mainly see it is possible on the basis of bilateral or multilateral international agreements." [emphasis added]

Background (Statewatch News Online)

Support our work by making a one-off or regular donation to help us continue to monitor the state and civil liberties in Europe.
Search our database for more articles and information or subscribe to our mailing list for regular updates from Statewatch News Online.

We welcome contributions to News Online and comments on this website. E-mail us or send post to Statewatch c/o MayDay Rooms, 88 Fleet Street, London EC4Y 1DH.

Home | News Online | Journal | Observatories | Analyses | Database | SEMDOC | About Statewatch

© Statewatch ISSN 1756-851X. Personal usage as private individuals/"fair dealing" is allowed. We also welcome links to material on our site. Usage by those working for organisations is allowed only if the organisation holds an appropriate licence from the relevant reprographic rights organisation (eg: Copyright Licensing Agency in the UK) with such usage being subject to the terms and conditions of that licence and to local copyright law.