Passenger name record data audit required annually to prevent misuse; separate officers must conduct system and security audits. Regulation 9 requires annual independent system and security audits of Passenger Name Record information to prevent misuse. Audits are to be conducted by an officer of specified senior rank from the National Customs Targeting Centre-Passenger appointed by the Director General of Analytics and Risk Management, and the same officer is prohibited from performing both audits.