Passenger record data retention requires anonymisation after the prescribed period, subject to investigation needs and controlled authorised access.

Passenger name record information in the Customs designated system may be retained for up to five years, except where required for an investigation, prosecution, or court proceeding. On expiry, it must be depersonalised or anonymised by masking direct passenger identifiers. Such information may be repersonalised or unmasked for an identifiable case, threat, or risk concerning specified purposes. Further analysis and study is limited to an authorised officer of the prescribed senior rank.

---

---

---