Activities of Michał BONI related to 2011/0023(COD)
Plenary speeches (1)
Use of Passenger Name Record data (EU PNR) (debate)
Amendments (31)
Amendment 51 #
Draft legislative resolution
Citation 5 a (new)
Citation 5 a (new)
- having regard to the European Parliament resolution of 11 February 2015 on anti-terrorism measures (2015/2530(RSP)),
Amendment 120 #
Proposal for a directive
Recital 12
Recital 12
(12) The definition of terrorist offences should be taken from Articles 1 to 4 ofapplied in this Directive should be the same as in Council Framework Decision 2002/475/JHA on combating terrorism37. The definition of serous crime should be taken from Article 2 of Council Framework Decision 2002/584/JHA of 13 June 2002 on the European Arrest Warrant and the surrender procedure between Member States38 . However, Member States may exclude those minor offences for which, taking into account their respective criminal justice system, the processing of PNR data pursuant to as amended by Council decision 2008/919/JHA. The term serious crime applied in this dDirective would not be in line with the principle of proportionality. The definition of serious transnational crime should be taken from Article 2 of Council Framework Decision 2002/584/JHA and the United Nations Convention on Transnational Organised Crimeencompasses the crimes listed in Article 2.1. __________________ 38 OJ L 190, 18.7.2002, p. 1.
Amendment 134 #
Proposal for a directive
Recital 14
Recital 14
(14) The contents of any lists of required PNR data to be obtained by the Passenger Information Unit should be drawn up with the objective of reflecting the legitimate requirements of public authorities to prevent, detect, investigate and prosecute terrorist offences or serious crime, thereby improving internal security within the Union as well as protecting the fundamental rights of citizens, notably privacy and the protection of personal data. Such lisdata sets should not contain any personal data that could reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership or data concerning health or sexual life of the individual concerned. The PNR data should contain details on the passenger’s reservation and travel itinerary which enable competent authorities to identify air passengers representing a threat to internal security.
Amendment 156 #
Proposal for a directive
Recital 19
Recital 19
(19) Taking fully into consideration the right to the protection of personal data and the right to non-discrimination, in accordance to the Charter of Fundamental Rights of the European Union, no decision that produces an adverse legal effect on a person or seriously affects him/her should be taken only by reason of the automated processing of PNR data. Moreover, no such decision should be taken by reason of a person’s race or ethnic origin, religious or philosophical belief, political opinion, trade union membership, health or sexual life.
Amendment 171 #
Proposal for a directive
Recital 21
Recital 21
(21) The period during which PNR data are to be retained should be proportionate to the purposes of the prevention, detection, investigation and prosecution of terrorist offences and serious crime. Because of the nature of the data and their uses, it is necessary that the PNR data are retained for a sufficiently long period for carrying out analysis and for use in investigations. In order to avoid disproportionate use, it is necessary that, after an initial period, the data are anonymisedmasked out and only accessible under very strict and limited conditions.
Amendment 173 #
Proposal for a directive
Recital 21 a (new)
Recital 21 a (new)
(21a) PNR data should be processed to the greatest extent possible in a masked out way in order to ensure a highest level of data protection by making it impossible for those having access to masked out data to identify a person and to draw conclusions as to what persons are related to that data. Re-identifying masked out data is possible only under conditions ensuring a high level of data protection.
Amendment 189 #
Proposal for a directive
Recital 26
Recital 26
(26) Transfers of PNR data by Member States to third countries should be permitted only on a case-by-case basis and in compliance with Framework Decision 2008/977/JHA. To ensure the protection of personal data, such transfers should be subject to additional requirements relating to the purpose of the transfer, the quality of the receiving authority and the safeguards applicable to the personal data transferred to the third country, as well as the principle of necessity and proportionality of such a transfer.
Amendment 203 #
Proposal for a directive
Recital 28
Recital 28
(28) This Directive does not affect the possibility for Member States to provide, under their domestic law, for a system of collection and handling of PNR data for purposes other than those specified in this Directive, or from transportation providers other than those specified in the Directive, regarding internal flights subject to compliance with relevant data protection provisions, provided that such domestic law respects the Union acquis. The issue of the collection of PNR data on internal flights should be the subject of specific reflection at a future date.
Amendment 227 #
Proposal for a directive
Article 1 – paragraph 1
Article 1 – paragraph 1
1. This Directive provides for the transfer by air carriers of Passenger Name Record data of passengers of international flights to and from the Member Staterelating to passenger flights between EU Member States and third countries, for intra-EU flights and domestic flights, as well as the processing of that data, including its collection, use and retention by the Member States and its exchange between them.
Amendment 253 #
Proposal for a directive
Article 2 – paragraph 1 – point b a (new)
Article 2 – paragraph 1 – point b a (new)
(ba) 'intra-EU flight' means any scheduled or non-scheduled flight by an air carrier originating in a Member State with a final destination in another Member State, including any transfer of transit flights;
Amendment 254 #
Proposal for a directive
Article 2 – paragraph 1 – point b b (new)
Article 2 – paragraph 1 – point b b (new)
(bb) 'domestic flight' means any scheduled or non-scheduled flight by an air carrier originating in a Member State with a final destination in the same Member State;
Amendment 268 #
Proposal for a directive
Article 2 – paragraph 1 – point g
Article 2 – paragraph 1 – point g
(g) ‘terrorist offences’ means the offences under national law referred to in Articles 1 to 4 of Council Framework Decision 2002/475/JHA; on combating terrorism as amended by Council decision 2008/919/JHA.
Amendment 296 #
Proposal for a directive
Article 2 – paragraph 1 – point i a (new)
Article 2 – paragraph 1 – point i a (new)
(ia) Masked out means rendering certain data elements of PNR data indecipherable to a user, without deleting them (e.g. by the means of applying a cryptographic state-of-the-art function to the elements of clear text data making a passenger identifiable); elements that are rendered indecipherable must comprise all elements making a passenger identifiable. Identical clear text data may result in identical masked out data in order to make it possible to match data without identifying the persons who are subject to that data.
Amendment 324 #
Proposal for a directive
Article 3 – paragraph 3 a (new)
Article 3 – paragraph 3 a (new)
3a. Each Passenger Information Unit shall appoint an independent Data Protection Officer, who ensures the internal supervision of the Passenger Information Unit's activities and will totally oversee the transfer of PNR data to other competent authorities, to other Member States and Europol. The Data Protection Officer shall report wrong conduct of the data protection requirements set out in this directive
Amendment 344 #
Proposal for a directive
Article 4 – paragraph 2 – point a
Article 4 – paragraph 2 – point a
(a) carrying out an assessment of the passengers prior to their scheduled arrival or departure from the Member State in order to identify any persons who may be involved in a terrorist offence or serious transnational crime and who require further examination by the competent authorities referred to in Article 5 as well as Europol. In carrying out such an assessment, the Passenger Information Unit may process PNR data against pre-determined criteria in accordance with this Directive, and may compare PNR data against relevant databases, including international or national databases or national mirrors of Union databases, where they are established on the basis of Union law, on persons or objects sought or under alert, in accordance with Union, international and national rules applicable to such files. Member States shall ensure that any positive match resulting from such automated processing is individually reviewed by non-automated means in order to verify whether the competent authority referred to in Article 5 needs to take action;
Amendment 382 #
Proposal for a directive
Article 4 – paragraph 3
Article 4 – paragraph 3
3. The assessment of the passengers prior to their scheduled arrival or departure from the Member State referred to in point (a) of paragraph 2 shall be carried out in a non- discriminatory manner on the basis of assessment criteria established by its Passenger Information Unit. Member States shall ensure that the assessment criteria are set by the Passenger Information Units, in cooperation with the competent authorities referred to in Article 5. The assessment criteria shall in no circumstances be based on a person’s raceracial or ethnic origin, political opinions, religious or philosophical belief, political opinions, trade union membership, health or sexual life.
Amendment 424 #
Proposal for a directive
Article 5 – paragraph 3
Article 5 – paragraph 3
3. Each Member State shall notify the list of its competent authorities to the Commission twelve months after entry into force of this Directive at the latest, and may at any time update its declarnotification. The Commission shall publish this information, as well as any updates, in the Official Journal of the European Union.
Amendment 461 #
Proposal for a directive
Article 6 – paragraph 2 – point a – introductory part
Article 6 – paragraph 2 – point a – introductory part
(a) once, 24 to 48 hours before the scheduled time for flight departure;
Amendment 501 #
Proposal for a directive
Article 7 – paragraph 3
Article 7 – paragraph 3
3. The Passenger Information Unit of a Member State shall have the right to request, if necessary, the Passenger Information Unit of any other Member State to provide it with PNR data that are kept in the latter’s database in accordance with Article 9(2), and, if necessary, also the result of the processing of PNR data. The Passenger Information Unit may request access to specific PNR data kept by the Passenger Information Unit of another Member State in their full form without the masking out only in exceptional circumstances in responhave been already masked out. The Passenger Information Unit shall only provide the full PNR data where it is reasonably believed that it is necessary for the purpose of Article 4(2)(b) and only when authorised to a specific threat or a specific investigation or prosecution related to terrorist offences or serious crimedo so by an authority competent under Article 9(3).
Amendment 512 #
Proposal for a directive
Article 7 – paragraph 4
Article 7 – paragraph 4
4. Only in those cases where it is necessary for the prevention of an immediate and serious threat to public securitywhen necessary in cases of emergency and under the conditions laid down in paragraph 2 and 3 may the competent authorities of a Member State request directly the Passenger Information Unit of any other Member State to provide it with PNR data that are kept in the latter’'s database in accordance with Article 9(1) and (2). Such requests shall relate to a specific investigation or prosecution of terrorist offences or serious crime and shall be reasoned. Passenger Information Units shall respond to such requests as a matter of priority. The requests from the competent authorities, a copy of which shall always be sent to the Passenger Information Unit of the requesting Member State, shall be reasoned. In all other cases the competent authorities shall channel their requests through the Passenger Information Unit of their own Member State.
Amendment 536 #
Proposal for a directive
Article 7 – paragraph 6 a (new)
Article 7 – paragraph 6 a (new)
6a. Passenger Information Units shall establish the possibility for Europol to request access to PNR data.
Amendment 539 #
Proposal for a directive
Article 7 – paragraph 6 b (new)
Article 7 – paragraph 6 b (new)
6b. Member States shall ensure that their Passenger Information Unit's, in order to fulfil their tasks as laid down in Article 4(2)(c), co-operate in the application of state-of-the-art technologies through Europol using technologies that shall allow Passenger and Europol to combine their data with that of other Passenger Information Unit's by ensuring full protection of personal data with the aim of analysing the data pursuant to Article 4(2)(c).
Amendment 545 #
Proposal for a directive
Article 8 – paragraph 1 – introductory part
Article 8 – paragraph 1 – introductory part
A Member State may transfer PNR data and the results of the processing of PNR data to a third country, only on a case-by- case basis and in duly reasoned request based on sufficient evidence and if:
Amendment 562 #
Proposal for a directive
Article 8 – paragraph 1 – point a b (new)
Article 8 – paragraph 1 – point a b (new)
(ab) the Member State from which the data were obtained has given its consent to transfer in compliance with its national law;
Amendment 565 #
Proposal for a directive
Article 8 – paragraph 1 – point a c (new)
Article 8 – paragraph 1 – point a c (new)
(ac) the third country or international body concerned ensures an adequate level of protection for the intended data processing;
Amendment 659 #
Proposal for a directive
Article 9 – paragraph 3
Article 9 – paragraph 3
3. Member States shall ensure that the PNR data are deleted permanently upon expiry of the period specified in paragraph 2. This obligation shall be without prejudice to cases where specific PNR data have been transferred to a competent authority and are used in the context of specific criminal investigations or prosecutions, in which case the retention of such data by the competent authority shall be regulated by the national law of the Member State.
Amendment 687 #
Proposal for a directive
Article 11 – paragraph 1 a (new)
Article 11 – paragraph 1 a (new)
1a. Each Passenger Information Unit shall appoint a Data Protection Officer in order to ensure compliance with existing national and Union data protection law and fundamental rights; that person shall be trained and qualified to a high standard in data protection law.
Amendment 689 #
Proposal for a directive
Article 11 – paragraph 2
Article 11 – paragraph 2
2. Each Member State shall provide that the provisions adopted under national law in implementation of Articles 21 and 22 of the Council Framework Decision 2008/977/JHA regarding confidentiality of processing and data security shall also apply to all processing of personal data pursuant to this Directive. Air carriers which collect contact details for passengers who have booked their flights through a travel agency or other travel intermediary shall be prohibited from using those data for marketing purposes.
Amendment 704 #
Proposal for a directive
Article 11 – paragraph 4 a (new)
Article 11 – paragraph 4 a (new)
4a. Those persons who operate security controls, who access and analyse the PNR data, and who operate the data logs, must be security cleared and security trained.
Amendment 713 #
Proposal for a directive
Article 11 – paragraph 6
Article 11 – paragraph 6
6. Any transfer of PNR data by Passenger Information Units and competent authorities to private parties in Member States or in third countries shall be prohibited. Any wrong conduct should be sanctioned.
Amendment 776 #
Proposal for a directive
Article 17 – paragraph 1 – point a
Article 17 – paragraph 1 – point a