Collection of passengers’ reservation, check-in and boarding data

In order to prevent, detect and prosecute terrorism offences and serious crime, air carriers must transmit to the French administration information on passengers on flights to and from French territory, under the conditions and within the limits set by French and European regulations.

The transmitted information concerns two types of data:

• PNR data

  (Passenger Name Record)

  Are the data collected by air carriers on the reservation and itinerary of one’s trip (type of ticket, travel date, number of luggage, seat number, etc.).

• API data

  (Advanced Passenger Information)

  Are one’s check-in and boarding data for a flight (name, birthdate, gender, nationality, data related to the travel documents, etc.).

The exhaustive list of concerned data is mentioned in Article R.232-14 of the Internal Security Code.

Personal data protection and minimisation measures

Passengers’ data are communicated by air carriers to the ANDV, which constitutes a filter before its communication to the competent authorities (police services, gendarmerie, customs and intelligence services). Therefore, when it receives a request from one of these departments, the ANDV checks its legitimacy based on the legal framework, then validates or rejects the request. If the request is validated, the ANDV carries out the exploitation of the API and PNR data and performs filtering to ensure the conformity of the provided results, in addition to the simple automated processing of the data. In this respect, it contributes to the protection of personal data.

No sensitive data in the sense of Article 6 of the modified Law of the 6­th January 1978 is collected: are excluded from the automated processing any data that could reveal the ethnic or racial origin of a moral person, their political, religious or philosophical opinions, their membership to a trade-union or not, their health condition or their sexual life.

After a six-month period, data that might directly reveal the identity of a passenger are masked in the system and require a specific and legitimate unmasking request by the competent authorities. Every personal data and registered information are deleted after a period of five years from the moment they are collected into the system.