Protection of Passenger Information Regulations

10 (1) In this section, adequacy finding means a decision adopted by the European Commission pursuant to Article 25(6) of Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and the free movement of such data.

(2) API information and PNR information retained by the Agency in the PAXIS system may be disclosed to the government of a foreign state for the purpose referred to in section 3 if

• (a) the foreign state is a member of the European Union or that government has received an adequacy finding or is covered by one; and

• (b) the Agency discloses to that government only the minimum data elements contained in the information that are necessary for that purpose.