Passenger travel data shared with Iceland to fight terrorism and serious crime

European Parliament approves EU‑Iceland data‑sharing agreement

• The Parliament formally agrees to a new agreement between the EU and Iceland.
• The agreement allows Iceland to receive and share passenger name record (PNR) data—details of people who travel by air—with EU authorities.
• The purpose is to help prevent, detect, investigate and prosecute terrorism and other serious crimes.

Key points of the resolution

• The Parliament gives its consent for the EU to conclude the agreement with Iceland.
• The Parliament’s President is instructed to send this decision to:
• the European Council
• the European Commission
• the governments and parliaments of all EU member states
• Iceland.

Broader context

The EU-Iceland PNR agreement is part of a wider effort by the European Union to strengthen cooperation with non-EU countries in combating terrorism and serious crime. PNR data typically includes information such as passenger names, travel dates, itineraries, ticket details, and contact information. By sharing this data, authorities can identify patterns, detect suspicious behavior, and prevent potential threats before they materialize.

This agreement aligns with the EU’s broader PNR Directive (2016/681), which requires airlines to transfer PNR data of passengers traveling to or from the EU to national authorities. Similar agreements already exist between the EU and other countries, such as the United States, Canada, and Australia, reflecting a global trend toward enhanced cross-border data sharing for security purposes.

Iceland, while not an EU member, is part of the Schengen Area and closely cooperates with the EU on justice and home affairs. This agreement ensures that Iceland can participate in the EU’s collective security framework, maintaining consistency in how passenger data is handled across Europe.

Impact on people living in the EU

For EU residents, this agreement means that their travel data may be shared with Icelandic authorities if they fly to, from, or through Iceland. This could affect:

• Privacy: PNR data is personal data, and its transfer raises questions about data protection and compliance with the General Data Protection Regulation (GDPR). However, the agreement likely includes safeguards to ensure data is used only for the stated purposes (counter-terrorism and serious crime) and is retained for a limited period.
• Security: The sharing of PNR data aims to enhance safety by allowing authorities to identify and track individuals who may pose a risk. This could lead to more effective prevention of terrorist attacks or serious crimes.
• Travel experience: Passengers may notice no direct changes in their travel routines, but the agreement could result in increased scrutiny for certain individuals or travel patterns deemed suspicious.