Who collects your travel data, who keeps it, and what the rules say

What access logs for passenger data must record, how long logs are kept, who may read them, and what an audit found when controls failed.

What API data is, which fields airlines send, who receives it, the legal basis, how long it is kept, and examples from four jurisdictions.

How Advance Passenger Information differs from Passenger Name Record data in source, fields, timing, recipient, legal basis and retention.

Which fingerprints and facial images border agencies collect from travellers, the legal basis, who holds the records and how long they are kept.

How interactive Advance Passenger Information lets border authorities answer board or no-board at check-in, with US, Canadian and UK examples.

What counts as a passenger data breach, who must be told and how fast, and what a US audit found after border biometric images were stolen.

How long governments keep PNR, API and biometric records about air travellers, what must be masked or deleted, and what the EU Court of Justice ruled.

What PNR data is, the 19 EU data elements, who sends and receives it, the legal basis, retention rules and the 2022 EU Court of Justice ruling.

Where governments store API, PNR and biometric passenger records, what laws say about servers and location, and how donated and vendor systems fit in.

Who decides why and how API and PNR data are processed, who processes them on instructions, and how EU, Kenyan and Philippine law split the roles.

Where border and passenger data must be stored, who can reach it, and what Kenyan, EU, Philippine and UN rules say about hosting and transfer.

The terms that decide who holds passenger data in border systems: data location, fees, funding, gateway providers and what official records publish.

What a Passenger Information Unit does with API and PNR data, the EU rules that govern it, the limits set by the EU Court of Justice, and examples.

What the EU PNR Directive requires of airlines and Member States, the 19 data elements it covers, retention rules, and what the EU Court of Justice ruled.

What Resolution 2396 (2017) asks of states on API, PNR, watch lists and biometrics, and how ICAO Annex 9 sets the passenger data standards.

The bodies that check how governments use API and PNR data: data protection authorities, data protection officers, courts and UN standards.

What Bangladesh law says about personal data, who regulates it, and where plans for an Advance Passenger Information System stand.

The DRC's 2023 Code du numérique, the status of its data protection authority, and the Securiport immigration system contract and US$30 fee.

What is on the public record about Ghana's API and PNR systems, the aviation security directive behind them, and the Data Protection Commission.

What passenger data Kenya collects from airlines and travellers, which agency receives it, how long it is kept, and the US$4.95 API/PNR fee.

How Nigeria collects advance passenger data, which agency receives it, what the Nigeria Data Protection Act 2023 covers, and where e-gates stand.

How the Philippines collects advance passenger data, what the Data Privacy Act says, and the status of e-gates and the CAISS border fee proposal.

Senegal's 2008 personal data law, the CDP, the airport biometric security fee collected for Securiport, and the contract's reported 2026 expiry.

Sierra Leone's planned data protection law, the Securiport airport security fee, its July 2026 suspension and special audit, and equipment records.

Data protection law status, the Securiport airport contract, National Audit Office findings and official and company responses in The Gambia.