Protection of Passenger Information Regulations

11 API information and PNR information retained by the Agency in an enforcement database may be disclosed on request to the government of a foreign state under an international agreement or arrangement if

• (a) the Agency is in possession of evidence that directly links the request to the investigation or prevention of terrorism or crimes referred to in section 3;

• (b) that government undertakes to provide the information with the same type of protection as that provided by the Agency; and

• (c) only those data elements contained in the information that are necessary for the purpose for which the information is requested are disclosed.