Passenger Name Record (PNR)

Advanced Passenger information (API) refers to the check-in and departure gate data collected by the carriers and airline companies on the passengers. The API includes information specifying the passenger’s identity, controlled at the check-in either by the carrier or automatically. The API data also includes flight data, such as flight date, flight departure and arrival places as well as the person’s baggage registered at check-in. 

The term Intra-EU flight means any scheduled or non-scheduled flight by an air carrier flying from the territory of a Member State and planned to land on the territory of one or more of the other Member States, without any stop-overs in the territory of a third country;

The term Extra-EU flight means any scheduled or non-scheduled flight by an air carrier flying from a third country and planned to land on the territory of a Member State or flying from the territory of a Member State and planned to land in a third country, including in both cases flights with any stop-overs in the territory of Member States or third countries.

Air Carrier means an air transport undertaking with a valid operating licence or equivalent permitting it to carry out carriage of passengers by air.

The PNR data collected by the air carries refer to the following:

1. PNR record locator
2. Date of reservation/issue of ticket
3. Date(s) of intended travel
4. Name(s)
5. Address and contact information (telephone number, e-mail address)
6. All forms of payment information, including billing address
7. Complete travel itinerary for specific PNR
8. Frequent flyer information
9. Travel agency/agent 
10. Travel status of passenger, including confirmations, check-in status, no-show or go-show information
11. Split/divided PNR information
12. General remarks (including all available information on unaccompanied minors under 18 years, such as name and gender of the minor, age, language(s) spoken, name and contact details of guardian on departure and relationship to the minor, name and contact details of guardian on arrival and relationship to the minor, departure and arrival agent)
13. Ticketing field information, including ticket number, date of ticket issuance and one-way tickets, automated ticket fare quote fields, ATFQ).
14. Seat number and other seat information
15. Code share information
16. All baggage information
17. Numbers and names of other passengers in PNR
18. Any advance passenger information (API) data collected (including the type, number, country of issuance and expiry date of any identity document, nationality, family name, given name, gender, date of birth, airline, flight number, departure date, arrival date, departure port, arrival port, departure time and arrival time)
19. All historical changes to the PNR listed in numbers 1 to 18.

The Passenger Information Unit, PIU Finland refers to the specific PTR crime investigation unit established for the processing of passenger data (PTR = public safety: Police, Customs and Border Guard). The PTR crime investigation unit can include representatives separately assigned to the task by the PTR authorities.

The responsibility of PIU Finland is to receive and process the PNR data as defined in legislation. The authorities competent to process PNR include the Police, Customs and the Border Guard.

Passenger means any person, including persons in transfer or transit and excluding members of the crew, carried or to be carried in an aircraft with the consent of the air carrier, such consent being manifested by that person's registration in the passengers list;

Passenger name record or ‘PNR’ means a record of each passenger's travel requirements which contains information necessary to enable reservations to be processed and controlled by the booking and participating air carriers for each journey booked by or on behalf of any person, whether it is contained in reservation systems, departure control systems used to check passengers onto flights, or equivalent systems providing the same functionalities;

The PNR data storage time refers to the period of time during with the received PNR data is kept in the passenger name records. Member States shall ensure that the PNR data provided by the air carriers to the PIU are retained in a database at the PIU for a period of five years after their transfer to the PIU of the Member State on whose territory the flight is landing or departing.

DIRECTIVE (EU) 2016/681 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the use of passenger name record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime.

Depersonalised masking out of the data elements which could serve to identify directly the passenger to whom the PNR data relate, invisible to the user; within six months from the delivery of the data to the PIU, the following elements of the PNR data must be separated by masking them out:

1. name(s), including the names of other passengers on the PNR and number of travellers on the PNR travelling together;
2. address and other contact data;
3. all forms of payment information, including billing address, to the extent that it contains any information which could serve to directly identify the passenger to whom the PNR relate or any other persons; 
4. frequent flyer information;
5. general remarks; and
6. any API data that have been collected.

Terrorist offence refers to crimes as per Chapter 34 a Sections 1, 1 a, 2—4, 4 a—4 c, 5 and 5 a—5 c of the Criminal Code of Finland. 

Data Protection Officer is an officer working at the National Police Board of Finland, appointed by the Police Board as the Controller of the PNR, responsible for the supervision of the PNR data processing and the implementation of data protection measures in PIU Finland.

The Data Protection Officer has access to the data processed by PIU Finland. The Data Subject has the right to contact the Data Protection Officer in all matters related to the processing of the PNR data of the Data Subject in question.

Contact instructions as well as updated contact details are available at National Police Board as a controller.

In the contexts of PNR and processing of PNR data and the use of PNR for the purposes of prevention, detection and investigation of terrorist offences serious crime for prosecution purposes, the term ‘serious crime’ refers to forms of crime with the statutory punishment of at least three years of imprisonment.

For the forms of crime, see EUR-Lex website.