
Article 1 

1. When transferring PNR data to the Member States' passenger information units pursuant to Directive (EU) 2016/681, air carriers shall use one of the data formats and transmission protocols listed in points 1 and 2 of the Annex to this Decision.
2. In the event that air carriers transfer advance passenger information (API) data referred to in Article 8(2) of Directive (EU) 2016/681 distinctly from the PNR data transferred for the same flight, they shall use the data format referred to in point 3 of the Annex to this Decision.
3. By way of derogation from paragraphs 1 and 2 above, air carriers that do not operate extra-EU and intra-EU flights according to a specific and public schedule and that do not possess the necessary infrastructure to support the data formats and transmission protocols listed in the Annex shall transfer PNR data by electronic means that provide sufficient safeguards in respect of the technical security measures, to be agreed bilaterally between the air carrier and the relevant Member State.
Article 2 

1. The Commission shall conduct a review of this implementing decision by 28 April 2021. The review shall address in particular the possibility to provide for open standard transmission protocols exclusively or in addition to existing protocols, while ensuring they are aligned with international standards and best practices.
2. In light of this review, the Commission may adopt an amendment to this Decision.
Article 3 
This Decision shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.
Done at Brussels, 28 April 2017.
For the Commission
The President
Jean-Claude JUNCKER
ANNEX
1. 

— EDIFACT PNRGOV, as described in EDIFACT implementation guide; PNR data pushed to States or other authorities; PNRGOV message version 11.1 or later;
— XML PNRGOV, as described in XML implementation guide; PNR data pushed to States or other authorities; PNRGOV message version 13.1 or later.

2. 

— IBM MQ;
— IATA Type B;
— AS4 Profile of ebMS 3.0 Version 1.0, OASIS Standard, published on 23 January 2013. Implementation of AS4 according to the e-SENS AS4 Profile developed by the e-SENS Large Scale Pilot, current identifier and version: ‘PR - AS4 - 1.10’. As from 2017, the Connecting Europe Facility will continue to maintain and improve these implementation guidelines.

3. 

— EDIFACT PAXLST, as described in WCO/IATA/ICAO Passenger List message (PAXLST) implementation guide 2003 version or later.
