7.—(1) A UK competent authority must not—
(a)process [F1PNR information] for purposes other than [F2a purpose described in regulation 6(3)], or
(b)take any decision which produces an adverse legal effect on a person or otherwise significantly affects a person—
(i)only by reason of the automated processing of PNR data, or
(ii)on the basis of any of the matters described in regulation 6(5)(c) in relation to that person.
(2) Paragraph (1)(a) is without prejudice to the ability of a UK competent authority to exercise its functions [F3—
(a)] in circumstances where other offences, or indications of such offences, are detected during the course of any enforcement action taken further to the processing of PNR data[F4, or
(b)in relation to public health.]
[F5(3) Where the PIU transfers PNR information under regulation 6(9), the UK competent authority must not transfer the PNR information to another person without the consent of the PIU.]
Textual Amendments
F1Words in reg. 7(1)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(2)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F2Words in reg. 7(1)(a) substituted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(2)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F3Words in reg. 7(2) renumbered as reg. 7(2)(a) (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(3)(a) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F4Reg. 7(2)(b) and word inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(3)(b) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)
F5Reg. 7(3) inserted (31.12.2020) by European Union (Future Relationship) Act 2020 (c. 29), s. 40(6)(b), Sch. 2 para. 7(4) (with Sch. 6 para. 9); S.I. 2020/1662, reg. 2(cc)