EU Signs Passenger Data Sharing Agreements with Norway and Iceland
The European Union has signed agreements with Norway and Iceland to enable the transfer of Passenger Name Record (PNR) data between the EU and these Schengen partners. The arrangements aim to strengthen joint efforts against terrorism and serious organized crime by allowing structured, lawful data exchanges linked to air travel between their territories and EU Member States.
Under the framework, Norway and Iceland will receive PNR data from air carriers operating flights to and from the EU. The data, collected during booking and check-in, will be processed to prevent, detect, investigate, and prosecute serious criminal and terrorist offenses. Operational use will be subject to strict purpose limitation, retention rules, and oversight requirements.
The Commission emphasized that the agreements embed robust privacy and data protection safeguards aligned with EU standards. These include compliance with the GDPR, the Law Enforcement Directive, data minimization, proportionality, independent supervision, redress mechanisms, and legal certainty for carriers handling PNR transfers.
The agreements will enter into force after completion of domestic procedures in Norway and Iceland and EU institutional approval. The European Parliament must consent before the Council can adopt the decisions to conclude the agreements. The EU maintains similar PNR arrangements with the United States, Australia, the United Kingdom, and Canada, indicating a consolidated approach to cross-border aviation data sharing for security purposes within a rights-compliant framework.
