EU and Norway to Share Flight Booking Data to Fight Terrorism and Serious Crime

EU and Norway Data Sharing Agreement

The European Parliament has formally approved an agreement allowing the European Union and Norway to share Passenger Name Record (PNR) data.

What is PNR Data?
PNR data consists of the details that airlines collect when people book flights. This information includes:

• Name
• Travel dates
• Contact information

Purpose of Sharing
The data sharing is intended to help authorities:

• Prevent serious crimes.
• Detect serious crimes.
• Investigate serious crimes.
• Prosecute terrorism and other serious crimes.

Key Details of the Agreement

• Scope: The exchange of PNR data is limited specifically to counter-terrorism and serious crime purposes. It is not for general surveillance or other uses.
• Legal Status: This approval is a legislative resolution, not a treaty. It follows a draft Council decision and the actual agreement between the EU and Norway.

Next Steps
The Parliament’s President will send this decision to several bodies to ensure the agreement moves forward:

• The European Council
• The European Commission
• The governments and parliaments of all EU member states
• The government and parliament of Norway

Broader context

The EU-Norway Agreement on PNR data transfer is part of a wider effort by the EU to strengthen cross-border cooperation in combating terrorism and serious crime. PNR data sharing is already a standard practice among EU member states, governed by the EU PNR Directive (2016/681), which requires airlines to provide passenger data to national authorities for security purposes.

This agreement extends that framework to Norway, a non-EU country that is part of the Schengen Area and closely aligned with EU security policies. Similar agreements exist with other non-EU countries, such as the US, Canada, and Australia, reflecting a global trend toward enhanced data-sharing for security.

The legal basis for such agreements is rooted in international law and EU treaties, ensuring that data transfers comply with privacy and data protection standards, including the General Data Protection Regulation (GDPR) where applicable.

Impact on people living in the EU

For EU residents, this agreement means that flight booking details (e.g., name, travel dates, contact info) may be shared with Norwegian authorities if they travel to or from Norway. This data will be used only for counter-terrorism and serious crime investigations, not for general surveillance or commercial purposes.

Key implications:

• No direct action required: Travelers do not need to do anything differently when booking flights.
• Privacy safeguards: Data sharing is subject to strict conditions to protect personal information, including limitations on retention periods and access rights.
• Potential benefits: Enhanced security cooperation may help prevent crimes and improve safety for travelers.