Who controls passenger data in border systems?

SITA said a dedicated data centre next to the national Passenger Information Monitoring and Management centre provides processing and storage capacity. The source does not state the contractual controller, retention period or access rules ¹.

The announced scope included collecting vaccination and travel information and sharing approved information with state and territory public-health authorities. Retention terms not published in the cited release. ²

Home Affairs applies the Privacy Act and, where relevant, the Australia-EU PNR Agreement. Disclosure to other authorities requires equivalent safeguards. Access and correction requests are available ¹.

Scope includes biometric identification, watchlists and immigration records. Contractual retention and access terms are not published ¹

Domestic data hosting and full government data ownership were in the initial proposal, as reported. Senior Secretary Manzur Morshed wrote that any agreement must guarantee government ownership of all data.

Company describes application-data encryption in transit and at rest. Contractual retention and access terms are not published ¹

Zetes says it will host the signature environment and certificates. Full access, retention and exit clauses are not published ¹.

Authentication and signature certificates are supplied for the identity documents. Contractual data storage, control and retention terms are not published ¹

Not published. On 9 April 2016 an interim court order required Securiport to stop processing data on one named individual.

PassCam terms name AUGENTIC as responsible for application-data processing, permit transfers to DGSN and service partners, and say DGSN retains and processes data separately. No fixed retention period is stated in that section ²

The ministry described planned fingerprint, facial and voice matching against Civil Registry, PDI and Interpol databases. Retention and contractual access terms: Not published ¹.

The company describes a repository of citizens' biometric and alphanumeric data, with facial recognition to be added. Retention and contractual controller terms are not published ¹

Government says Imprenta Nacional de Colombia will have exclusive access to personalisation data under the new model. This is the announced allocation, not an independent compliance finding ¹

Commission reported the central server in Brussels. Contractual retention and access provisions are not reproduced ¹

The company says the Costa Rican government stores captured fingerprints and facial images. Contractual retention and access rules are not published ¹.

Biometric collection and polling-day identity verification described. Contractual terms not published ¹

The system centralises migration data. Storage location and control terms Not published.

The supplier describes collecting administrative information, fingerprints and photographs on mobile registration workstations. Contractual custody and retention terms are not published in the cited sections ¹

The system records name, travel document data, fingerprints, facial images, date and place of entry and exit, and refusals of entry. Managed centrally by eu-LISA (European Commission, 10 April 2026)

A database of over 400 million third-country nationals with fingerprints and facial images, serving the Entry/Exit System first and later SIS, VIS, Eurodac and ECRIS-TCN (company statement, 3 June 2020)

Company statement describes consent before authentication and reading identity-card chip data through a smartphone. Full controller, retention and subcontractor clauses are not published ¹.

SITA says biometric matching connects with national databases. Storage location, controller allocation and retention terms are not published in the cited case study. ²

Encrypted application QR code or smart identity card combined with facial verification. Hosting and retention terms not published in the cited releases. ^1,2

Scope includes biometric deduplication, enrolment software, manual adjudication and monitoring. Contractual retention and access provisions are not published ¹

No central store of passenger personal data. Data stays in the passenger's smartphone wallet and is shared with the origin airport for ID validation, then purged from the airport system 24 hours after departure (Lok Sabha answer, 8 February 2024)

MIGA describes two planned data centres and says government immigration staff, not the project enterprise, operate border controls ².

Passport and facial verification connected to border-control management, retention and hosting terms not published. ¹

Gates compare the face image in the passport chip with a live image, with no prior biometric registration (company statement, 30 August 2019). Storage terms not published

NEC says kiosk information links to immigration and customs systems. It captures faces and fingerprints, with Japanese citizens excluded from fingerprint capture. Contractual retention and hosting provisions are not published. ¹

Facial information is enrolled with passport and boarding-pass information, the cited releases do not publish the contractual retention schedule. ¹

Government testimony described government-developed software and 31,000 supplier kits, cleaned in April 2019. This does not establish supplier access to the national database or contractual retention terms ¹

Company describes management of country-signing keys and certificates. Contractual access and retention terms are not published ¹

NEC described a biometric identification system and e-gates in its subcontract scope. Contractual controller, retention and onward-access terms are not published ².

The April 2025 policy places permanent personal and biometric records under Maldives Immigration's ownership and control. Temporary facial-recognition copies are deleted after verification. Authority-held records are retained, with no deletion requests accepted. Sharing with law-enforcement and other relevant entities is described ³.

The company describes four interoperable databases for separate authorities covering citizens, foreigners, travel documents and border management. Retention and contractual control provisions are not published ¹

Passport chip holds photograph and fingerprint biometrics. Contractual access and retention provisions are not published ¹

Initial enrolment captured photographs, personal information and ten fingerprints. Expanded scope adds iris capture. Contractual retention and access terms are not published ¹

The Interior Minister controls the biographic travel-document register. In May 2025, government described planned migration of biometrics to a government data centre, with separate compartments and continued responsibility of each issuing authority. This is programme policy, not supplier contract wording ²

The trial scanned the passport, boarding pass and face at enrolment, then compared a boarding-gate face scan with the enrolment scan. Storage and retention terms are not published in the cited release. ¹

Announced functions include traveller checks against national and international watchlists and registration of foreign nationals. Detailed contractual controls are not published ¹

The announced system reuses personal data from the national identity registry for passport enrolment and cross-references identity cards and passports. Contractual access and retention terms are not published ¹

Pakistan would keep ownership of all biometric and travel data, as reported.

Wallet access can use face, fingerprint or PIN authentication. Contractual retention and access terms are not published ¹

Company describes enrolment through the ANA app or airport kiosks and facial matching at security-access and boarding gates. Controller, retention and exit clauses are not published ¹.

Optional enrolment through the Qatar Airways application or an airport kiosk, contractual storage and retention provisions not published. ¹

Gates are integrated with visa, biometric and airline operations systems (SDAIA, as reported 11 March 2025). Storage terms not published

Not published. In November 2012 RESTIC said it had asked the personal data commission CDP to have Securiport explain passenger-data safeguards ¹.

Not published. During the suspension Securiport was to keep logging inbound and outbound passenger data, except for diplomatic passport holders, as reported by Voyages Afriq.

Passport authentication followed by thumbprint verification, hosting and retention provisions not published. ²

Token-less clearance relies on facial and iris biometrics and on advance manifests submitted by airline and ship operators (ICA, 31 July 2024). Storage terms not published

Government describes advance registration and future API/PNR. Its statement of intended GDPR compliance is not a regulator finding or a published retention clause ².

MIDAS registers passport details and biometric data. Specific access, transfer and retention provisions are not published ¹

VFS describes cloud hosting and deletion under a purging policy, without a retention interval ². The Controller General asserted GDPR-based deletion after visa approval ³. These are stated arrangements, not an independent compliance finding.

The announced service captures applicants' personal details, photographs, fingerprints and electronic signatures. Contractual retention and controller provisions are not published ¹

The ministry's 2019 report records e-visa database sharing with immigration from 1 June 2019. Retention periods and supplier data rights are not given ¹.

The scope includes biometric enrolment, duplicate removal and a central passport register. Retention and contractual control provisions are not published ¹

President Adama Barrow said in March 2023 that Securiport collects the data and the Gambia Immigration Department keeps all of it, as reported by The Point.

The company describes fingerprint and photograph comparison followed by human adjudication of suspected duplicates. Contractual control and retention terms are not published ¹

MIDAS collects, processes and stores traveller information including biometrics. Detailed access and retention terms are not published ¹

Biometric information of travellers registered with GDRFA since 2019 is stored on the GDRFA system for future travel, as reported by Gulf News on 9 February 2023

Home Office processes the information. Facial images are typically kept for three years, with grounds for longer retention. Biographic and personal data remain for 15 years after the last case action. The app retains no data after successful submission. Check-service input remains up to 30 minutes after activity, and access logs for 30 days ²

CBP receives passenger and crew manifests before arrival and departure. Full contract ownership and retention terms are not published on the overview page ¹.

GAO reports that CBP requires commercial partners to follow its privacy requirements and can audit compliance. The tracker records a later audit plan addressing that recommendation. Full contractual retention clauses are not published here ².

NEC describes fingerprint and facial matching and migration of 16 million legacy records. Contractual hosting and retention terms are not published in its release. ²