Aviation Security Explained

Data tables

Advance passenger information and PNR collection by country

Most states that collect passenger data ask airlines for advance passenger information (API) from the passport, and fewer collect booking data (PNR). In May 2020 the UN counter-terrorism directorate counted 86 UN member states with API and 48 with PNR 1. In 2024 a US paper citing the IATA tracker put the figures at 97 states with API rules in force and 64 with PNR rules 2. The table below lists 45 countries and one EU-wide entry, with the source and date for each.

Last checked: 35 sources

How to read this table

API is the passport data a passenger gives at check-in. Interactive API, or iAPI, means the government replies to the airline before boarding with a board or no-board message. PNR is the booking record held by the airline 4.

Each row says what kind of source backs it. A national law or agency page carries the most weight. Some rows rest only on a summary published by an airline or a UN programme. Those rows say so, with the date of the summary. All Nippon Airways publishes a list of the countries where it must send API or PNR. That list has no page date. We checked it on 19 October 2026 7. The UN goTravel figures are as of December 2025 5.

"Not confirmed" means we found no source we could open that settles the point. It does not mean the country lacks the system. Status is as of 19 October 2026. A row that gives another date is as of that date.

Global counts from UN and ICAO papers

UN Security Council resolutions 2178 (2014), 2396 (2017) and 2482 (2019) made API and PNR collection mandatory for all member states, according to CTED 1. Uptake has been slower than the resolutions ask. In May 2020 CTED wrote that 86 member states had API, less than half the UN total. It counted 48 with PNR, just under a quarter 1.

Two papers that the United States presented to ICAO regional meetings in 2024 cite the IATA API-PNR World Tracker. They give 97 states with API rules in force and 64 with PNR rules in force. They say about 51 states had API in 2014 and about 12 had PNR in 2017 2,3. In the North American, Central American and Caribbean region, 32 of 41 states and territories had API and 7 had PNR 2. In the Africa region, 5 of 48 states had API and 2 had PNR 3. The papers give no date for the tracker figures.

ScopeAPIPNRSource and date
World, 2014About 51 statesUS paper to ICAO, 2024 2
World, 2017About 12 statesUS paper to ICAO, 2024 2
OSCE area, January 201948% of participating states31%OSCE, 21 January 2019 4
UN member states, May 20208648CTED, 14 May 2020 1
World, IATA tracker97 states with rules in force64 statesUS papers to ICAO, June and July 2024 2,3
NACC region (41)327US paper to ICAO, 3 June 2024 2
AFI region (48)52US paper to ICAO, July 2024 3

Country table

The table runs by region: the Americas, Europe, the Middle East and Asia, Oceania and Africa. Legal basis is the law or rule named by the source. Where a row cites only the ANA list, it shows that the airline must send the data on flights to or from that country. It does not show the national law 7.

CountryAPIInteractive APIPNRLegal basis and yearSource type and date
United StatesYes. Carriers receive cleared or not cleared replies 11Yes 11Yes. DHS receives PNR under the 2012 EU-US agreement 12Aviation and Transportation Security Act of 2001 and Enhanced Border Security and Visa Reform Act of 2002 11National law, DHS notice of 18 November 2008 11
CanadaYes 13Yes. Interactive API with board or no-board messages 13Yes. Kept three and a half years 13Customs Act, Passenger Information (Customs) Regulations, Immigration and Refugee Protection Act and its regulations 13National agency page, modified 8 July 2026 13
MexicoYes 25,7Not confirmedYes. PNR to the tax authority SAT, start moved from 1 April to 1 July 2015 25SAT rule. The article does not name the legal text 25Press report of 6 April 2015 25 and Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
BrazilYes. Sent before take-off 22Not confirmedYes. First message 72 hours before departure 22ANAC Resolution 255 of 13 November 2012, in effect 22 July 2014 22National regulation 22
ArgentinaYes 23Not confirmedYes. PNRGOV format, first sent 72 hours before departure 23Joint General Resolution 3667 of AFIP, the National Migration Directorate, ANAC and PSA, published 25 September 2014 23National regulation 23. Onboarding to UN goTravel as of December 2025 5
ChileYes, from the decree start date 24Not confirmedYes, from the decree start date 24Law 21.325 of 2021, article 100. Decree 143 of 12 May 2026 takes effect 13 November 2026 24National law and PDI resolution published 6 August 2026 24
CARICOM IMPACS members (regional)Yes. Regional APIS run by the JRCC from 2007 26Not confirmedNot stated on the JRCC page 26Set up for the 2007 Cricket World Cup and made permanent by CARICOM Heads of Government in February 2007 26Regional agency page 26. IMPACS acts for 15 countries in UN CT Travel 6
United KingdomYes 7Yes. ICAO reported the UK began iAPI in 2015 15Yes 7Authority to Carry Scheme 2023, in force 3 April 2023 14National scheme page 14 and Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
European Union (26 member states bound by the PNR Directive)Yes. EU API Regulation 2025/12 of 19 December 2024 10Per member stateYes. Directive 2016/681 824 of 26 states had notified full transposition by July 2020. Slovenia partial, Spain none 9European Commission report of 24 July 2020 9
AustriaYes 7Not confirmedYes 7,8EU PNR Directive 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
BelgiumYes 7Not confirmedYes 7,8EU PNR Directive 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
FranceYes 7Not confirmedYes 7,8EU PNR Directive 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
GermanyYes 7Not confirmedYes 7,8EU PNR Directive 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
ItalyArrivals only 7Not confirmedNot listed by ANA 7EU PNR Directive applies 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
SwedenArrivals only 7Not confirmedYes 7,8EU PNR Directive 8Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
LuxembourgPassenger data processed through goTravel 5Not confirmedYes 8EU PNR Directive 8UN summary, December 2025 5
NorwayPassenger data processed through goTravel 5Not confirmedNot confirmedNot confirmedUN summary, December 2025 5
SwitzerlandNot confirmedNot confirmedPlanned. PNR Act passed 21 March 2025, expected in force end of 2026 30Federal Passenger Name Records Act 30National agency page, 20 October 2025 30. Onboarding to goTravel 5
GeorgiaPassenger data processed through goTravel 5Not confirmedNot confirmedNot confirmedUN summary, December 2025 5
MoldovaPassenger data processed through goTravel 5Not confirmedNot confirmedNot confirmedUN summary, December 2025 5
TurkeyYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
IsraelPilot only, per the report 32Not confirmedPlanned. PNR bill passed first Knesset reading 32PIU database bill 32Law firm report, 27 February 2023 32
United Arab EmiratesYes. Went live at Dubai International in November 2015, Sharjah next 31Not confirmedNot confirmed 31Not stated 31Press report, 3 November 2015 31
JapanYes 7Not confirmedYes. Inbound from October 2011, outbound from June 2017, electronic filing mandatory 17 March 2019 20Customs Law, articles 15 and 17 20National agency page 20 and Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
South KoreaYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
ChinaYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
TaiwanYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
Hong KongArrivals only 7Not confirmedNot listed by ANA 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
MongoliaPassenger data processed through goTravel 5Not confirmedNot confirmedNot confirmedUN summary, December 2025 5
IndiaYes 7Not confirmedYes. Sent to the National Customs Targeting Centre, kept five years 21Passenger Name Record Information Regulations, 2022, notified by CBIC on 8 August 2022 21Press explainer, 12 August 2022 21 and Industry summary: ANA airline guidance, undated, checked 19 October 2026 7
PakistanIn development 33Not confirmedIn development 33Legal basis under discussion 33UNODC report on a March 2023 consultation 33
BangladeshProposed 35Not confirmedProposed 35Finance Bill 2018 proposed adding API and PNR powers to the Customs Act 1969 35Press report, 19 June 2018 35. Current status not confirmed
IndonesiaYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
MalaysiaYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
PhilippinesYes. Bureau of Immigration API system 34,7Not confirmedNot confirmedNot confirmedUN summary, December 2025 5 and press report 34
SingaporeYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
ThailandYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
VietnamYes 7Not confirmedYes 7Not confirmedIndustry summary: ANA airline guidance, undated, checked 19 October 2026 7
AustraliaYes 17Yes. Advance Passenger Processing is a two-way link to immigration databases 17Yes 16Customs Act 1901, section 64AF. EU-Australia PNR Agreement in force 1 June 2012 16National agency pages 16,17
New ZealandYes. Advance Passenger Processing 19APP checks that passengers meet entry requirements 19Yes. Kept three years 19Customs and Excise Act 2018, sections 5, 47 and 49. Immigration Act 2009, section 102 18National compliance statement, March 2025 18
KenyaYes. APIS data included in PNRGOV messages 27Not confirmedYes. Operational from 21 May 2025 27Not stated in the factsheet 27National factsheet, May 2025 27
NigeriaYes. Interactive API 28Yes 28Yes 28Not stated 28Press report quoting the Immigration Service, 1 August 2025 28
South AfricaYes 29Yes. Interactive API for about 10 years as of 2019 29Not covered by the source 29Not stated. Department of Home Affairs is custodian 29ICAO presentation, 2019 29
BotswanaPassenger data processed through goTravel 5Not confirmedNot confirmedNot confirmedUN summary, December 2025 5
Sierra LeoneOnboarding to goTravel 5Not confirmedOnboarding 5Not confirmedUN summary, December 2025 5
AlgeriaOnboarding to goTravel 5Not confirmedOnboarding 5Not confirmedUN summary, December 2025 5

Europe: one directive, many national laws

In the EU, PNR rests on Directive 2016/681. Each member state sets up a Passenger Information Unit that receives PNR from airlines 8. In July 2020 the European Commission reported that 24 of 26 member states had notified full transposition. Slovenia had notified partial transposition and Spain none. The Commission referred Spain to the Court of Justice on 2 July 2020 9. All member states but one had extended PNR collection to flights inside the EU 9.

API follows a newer law. Regulation (EU) 2025/12 of 19 December 2024 requires carriers flying into the EU to collect API from the travel document by automated means and send it through a central router 10.

Switzerland is outside the EU. Its parliament passed a Passenger Name Records Act in a final vote on 21 March 2025. The referendum period has expired. fedpol says the act should take effect at the end of 2026 and that a new unit at fedpol will run it 30.

UN-supported systems: goTravel and CARICOM

The UN Countering Terrorist Travel Programme gives states software and training to use API and PNR. It works with 91 member states. 69 receive full technical help 6. Its software is called goTravel.

As of December 2025, seven countries ran goTravel in full: Botswana, Georgia, Luxembourg, Moldova, Mongolia, Norway and the Philippines. Algeria, Argentina, Switzerland and Sierra Leone were onboarding. More than 15 others were preparing to adopt it 5. The UN says the system processed over 63 million passenger records in the first three quarters of 2025 5.

In the Caribbean, CARICOM IMPACS runs a shared API system through its Joint Regional Communications Centre. It began for the 2007 Cricket World Cup and screens about 40 million air and sea passengers a year 26. The JRCC page does not list the member states that take part.

What the table cannot show

A yes in the table means the country asks airlines for the data. It does not show how well the data is used, who can see it or how long it is kept. A few sources give retention. Canada keeps API and PNR for three and a half years 13. New Zealand keeps PNR for three years 19. India keeps PNR for five years and then masks it 21.

Several rows rest on press reports. Nigeria's row comes from a statement by its Immigration Service chief reported on 1 August 2025 28. The UAE row comes from a 2015 report 31. Bangladesh's row reflects a 2018 proposal, and we could not confirm whether the rules were made 35. Israel's row reflects a bill at first reading in February 2023 32.

Readers who need a definitive answer for one country should check the national border agency. IATA keeps the fullest tracker, but it is not public.

Common questions

How many countries collect API and PNR?

CTED counted 86 UN member states with API and 48 with PNR in May 2020 1. US papers to ICAO in 2024, citing the IATA tracker, gave 97 states with API rules in force and 64 with PNR rules 2,3.

Is collecting API and PNR required by international law?

CTED says Security Council resolutions 2178, 2396 and 2482 made API and PNR collection mandatory for all member states 1.

What is the difference between API and interactive API?

With batch API the airline sends data and gets no reply. With interactive API the government answers before boarding with a board or no-board message 4. Canada and Australia run interactive systems 13,17.

Why do some rows cite an airline?

For many countries we found no national law or agency page we could open. In those cases we cite the All Nippon Airways country list, checked on 19 October 2026, and label the row as an industry summary 7.

Can I see the API or PNR data held about me?

Some countries say how. Canada lets travellers request their API and PNR data at no fee 13. Australia accepts freedom of information requests 16. New Zealand explains how to ask for access 19.

Related

Sources

  1. UN Counter-Terrorism Committee Executive Directorate (CTED): CTED and the UN Countering Terrorist Travel Programme (14 May 2020)
  2. ICAO NACC/DCA/12 WP/12, presented by the United States: API and PNR implementation (3 June 2024)
  3. ICAO AFI SECFAL Plan SC/13 WP/05, presented by the United States: Tenth anniversary of UNSCR 2178 and PNR implementation (July 2024)
  4. OSCE Transnational Threats Department: Overview of the use of API and PNR in the OSCE area, SEC.GAL/14/19 (21 January 2019), copy hosted by Statewatch
  5. UN Office of Counter-Terrorism: goTravel FAQ (status as of December 2025, checked 19 October 2026)
  6. UN Countering Terrorist Travel Programme: programme page (checked 19 October 2026)
  7. All Nippon Airways (ANA): API/PNR special guidance for each country (no page date, checked 19 October 2026)
  8. EUR-Lex: Directive (EU) 2016/681 on the use of passenger name record (PNR) data (27 April 2016)
  9. European Commission: Report on the review of Directive 2016/681, COM(2020) 305 final (24 July 2020)
  10. EUR-Lex: Regulation (EU) 2025/12 on the collection and transfer of advance passenger information for external border checks (19 December 2024)
  11. Federal Register, DHS: Privacy Act system of records notice, CBP Advance Passenger Information System, Vol. 73 No. 223 (18 November 2008)
  12. EUR-Lex: Agreement between the US and the EU on the use and transfer of PNR to DHS (OJ 11 August 2012)
  13. Canada Border Services Agency: Advance Passenger Information and Passenger Name Record (modified 8 July 2026)
  14. GOV.UK, Home Office: Authority to Carry Scheme 2023 (checked 19 October 2026)
  15. ICAO Uniting Aviation: Keeping our borders safe (8 September 2021)
  16. Australian Border Force: Collection of passenger name records (checked 19 October 2026)
  17. Australian Border Force: Advance Passenger Processing (checked 19 October 2026)
  18. New Zealand Customs Service: ICAO PNR SARPs, New Zealand compliance statement (March 2025)
  19. Immigration New Zealand: How we collect and use information about people flying in and out of New Zealand (checked 19 October 2026)
  20. Japan Customs: Advance reporting of PNR by airlines (checked 19 October 2026)
  21. BOOM: Customs asks for your PNR data and how they are going to use it (12 August 2022)
  22. ANAC Brazil: Resolucao No. 255 of 13 November 2012 on API and PNR, as amended (copy hosted by Normas Brasil)
  23. Boletin Oficial de la Republica Argentina: Resolucion General Conjunta 3667 (published 25 September 2014)
  24. Policia de Investigaciones de Chile: Resolucion exenta 161, API and PNR protocol, Diario Oficial No. 44.518 (6 August 2026), copy hosted by CNC
  25. IDC Online: Aplazan entrega de datos de pasajeros de aerolineas (6 April 2015)
  26. CARICOM IMPACS: Joint Regional Communications Centre (checked 19 October 2026)
  27. Kenya Directorate of Immigration Services: PNR factsheet (May 2025)
  28. News Agency of Nigeria: NIS border system enhances passenger profiling, national security (1 August 2025)
  29. ICAO TRIP Symposium 2019: API implementation by states, South Africa experience (2019)
  30. fedpol (Switzerland): Passenger Name Records Act (20 October 2025)
  31. Aviation Week: Future Borders, UAE's advanced passenger information system going live in Dubai (3 November 2015)
  32. Pearl Cohen: New Israeli bill on the collection and evaluation of flight passenger data (27 February 2023)
  33. UNODC Pakistan: National consultation on API and PNR systems (March 2023)
  34. Daily Tribune (Philippines): BI hosts SE Asia forum on passenger data systems (8 December 2023)
  35. The Financial Express (Bangladesh): Customs to track all travellers (19 June 2018)

Spotted an error? Write to [email protected]. See how we work on the methodology page.