Advance Passenger Information / Passenger Name Record Data

API/PNR data is used to identify high-risk individuals so the CBSA can closer question and examine them when they arrive in Canada. The CBSA also uses API data to help commercial airlines determine whether or not passengers have the appropriate travel document (for example, a visa or eTA) to enter Canada.

API/PNR data may also identify potential illegal activity such as:

• terrorism or terror-related crimes
• human smuggling or trafficking
• narcotics smuggling
• other serious transnational crimes

This information helps the CBSA to more efficiently process travellers entering Canada.

Privacy guidelines

The CBSA follows strict guidelines to protect the privacy of passengers and crew members. The data is stored in a secure system accessible only by authorized CBSA officers. The use of this data is subject to an audit process and users are liable for any misuse.
A summary of the API/PNR Program and its privacy implications can be found on the official Info Source web page.

Data retention

API/PNR data is kept for three-and-a-half years from the date of receipt and then destroyed. If the subject of API/PNR data is under active investigation, the information is transferred to a CBSA enforcement database and kept for up to six years.

Does the CBSA share API/PNR data?

API is only disclosed under the disclosure regime of s. 107 of the Customs Act and s. 8 of the Privacy Act.

When PNR data relates to terrorism or serious transnational crime, the CBSA may share it on a case-by-case basis with other government departments or foreign states. The CBSA will release the minimum amount of data necessary and where the other government departments or foreign states will provide the same type of protection offered by the CBSA. Refer to D1-16-3, Guidelines for the Access to, Use, and Disclosure of Advance Passenger Information (API) and Passenger Name Record (PNR) Data API/PNR program legislation.

Several pieces of legislation govern the CBSA's authority to collect API/PNR data, including:

• Customs Act: section 107.1
• Passenger Information (Customs) Regulations 
• Immigration and Refugee Protection Act: paragraph 148(1)(d)  
• Immigration and Refugee Protection Regulations: section 269

You can request your API/PNR data from the CBSA. You may only access your own information and that of your children under the age of 18.

If you are under the age of 18, you must have a parent or legal guardian sign the access request form.

There is no fee to access your API/PNR data.

How do I request my information?

To request your information, or to correct the data, print and complete the CBSA's Traveller's API/PNR Information Request form and mail it to the following address:

Canada Border Services Agency
Access to Information and Privacy Coordinator
333 North River Road
14th Floor, Tower A
Vanier, Ontario
K1A 0L8

In most cases, once the CBSA receives your request, you receive a written response within 30 days. Some requests may take longer than 30 days to process due to the complexity of the data.

Correct your information

If you believe that your API/PNR data is incorrect, you can request a correction. You must provide documentation to support your request. The CBSA may decide to not make the correction, and will add a note to your API/PNR data explaining that a correction was requested and refused.

If you are still not satisfied with the results, you can submit a complaint to the Office of the Privacy Commissioner for review under the Privacy Act.

All commercial air carriers must provide the CBSA with API data and all available PNR data for every passenger and crew member, travelling to Canada on their aircraft. This information must be provided at the last international airport before arriving in Canada.

The CBSA considers all aircraft operators engaged in the commercial transportation of persons or goods, regardless of size, to be a commercial air carrier. Examples of commercial air carriers include operators of:

• scheduled air service
• unscheduled charters
• cargo flights

Data transmission

As a commercial air carrier, you must provide API/PNR data to the CBSA in an approved format using an authorized method of transmission. Options include:

• connecting directly to the CBSA data acquisition system
• arranging for a service provider to connect on your behalf
• sending the data via email
• using the CBSA Internet API Gateway (IAG)
• using a combination of any of the above

Technical parameters for these methods are detailed in the "Carrier Messaging Requirements (CMR)" document, which is available upon request.

Commercial air carriers intending to begin service to Canada should contact the CBSA at least six months before service commences to arrange for the provision of API/PNR data.

Commercial air carriers that fail to comply with the requirement to provide API/PNR data correctly may be subject to administrative monetary penalties under the Customs Act.

IAPI Standard Operating Procedures for Commercial Air Carriers and Service Providers

The IAPI Standard Operating Procedures (SOP) document provides guidance to commercial air carriers and service providers on IAPI requirements, what to do in case of a no-board message, and expectations during a system outage. To request a copy, contact the API/PNR mailbox.

D-Memorandum

Memorandum D2-5-11, Administrative and Operational Guidelines for Commercial Air-mode Carriers for the Processing of Prescribed Traveller Information Pursuant to the Requirements of the Canada Border Services Agency

This memorandum outlines the CBSA requirements and administrative policies regarding the provision of prescribed API and reservation information about any person being transported to Canada by commercial air carriers.

Commercial Air Carrier Technical Support