EUROPEAN COMMISSION
Brussels, 24.7.2026
COM(2026) 383 final
ANNEX
to the
Proposal for a COUNCIL DECISION
on the conclusion of the Agreement between the European Union and the Republic of Korea on the transfer of Passenger Name Record (PNR) data for the prevention, detection, investigation and prosecution of terrorist offences and serious crime
ANNEX
AGREEMENT BETWEEN THE EUROPEAN UNION AND THE REPUBLIC OF KOREA ON THE TRANSFER OF PASSENGER NAME RECORD (PNR) DATA FOR THE PREVENTION, DETECTION, INVESTIGATION AND PROSECUTION OF TERRORIST OFFENCES AND SERIOUS CRIME
THE EUROPEAN UNION, hereinafter also referred to as the "Union" or "EU",
and
THE REPUBLIC OF KOREA, hereinafter also referred to as ‘Korea’,
hereinafter jointly referred to as "the Parties",
RECOGNISING that preventing, detecting, investigating, and prosecuting terrorist offences, as well as other serious crime, while preserving human rights and fundamental freedoms, in particular rights to privacy and data protection, are objectives of general interest;
RECOGNISING that the Parties share common values with respect to data protection and privacy reflected in their respective laws;
RECOGNISING that information sharing is an essential component of the fight against terrorist offences and other serious crime, and that in this context, the use of Passenger Name Record (PNR) data is a critically important instrument to pursue these goals;
RECOGNISING the importance of sharing PNR data and relevant and appropriate analytical information containing PNR data under this Agreement between the Parties with competent authorities of Korea, Member States of the Union (Member States), Europol and Eurojust as a means to foster international police and judicial cooperation;
SEEKING to enhance and encourage the cooperation between the Parties on PNR through the exchange of information and technical cooperation by national experts from the Member States and Korea, in particular on the development of pre-determined criteria and on other aspects of the processing of PNR;
HAVING REGARD to United Nations Security Council Resolutions 2396 (2017) and 2482 (2019), which call upon all States to develop the capability to collect and process PNR data and to the International Civil Aviation Organization Standards and Recommended Practices for the collection, use, processing and protection of PNR data adopted on 23 June 2020 as Amendment 28 to Annex 9 to the Convention on International Civil Aviation (the Chicago Convention);
HAVING REGARD to the adequacy decision in relation to the transfer of personal data from the EU to the Republic of Korea between commercial operators adopted by the Commission on 17 December 2021, concluding that the Republic of Korea ensures an essentially equivalent level of protection to the one guaranteed under the General Data Protection Regulation (GDPR).
RECOGNISING that this Agreement is not intended to apply to advance passenger information (API) that is collected and transmitted by air carriers to Korea for the purpose of border control;
MINDFUL of the Union's commitments pursuant to Article 6 of the Treaty on European Union on the respect for fundamental rights, the protection of individuals with regard to the processing of personal data pursuant to Article 16 of the Treaty on the Functioning of the European Union, the principles of proportionality and necessity concerning the right to respect for private and family life, the respect for privacy, and the protection of personal data under Articles 7 and 8 of the Charter of Fundamental Rights of the European Union in line with the relevant case-law of the Court of Justice of the European Union, as well as with Article 8 of the European Convention on the Protection of Human Rights and Fundamental Freedoms, Council of Europe Convention No. 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data and its additional Protocol 181;
MINDFUL of Korean commitments under the Constitution of the Republic of Korea, in particular Articles 10 and 17, and the Personal Information Protection Act;
RECOGNISING that under the Customs Act of the Republic of Korea the transfer of PNR data by air carriers to Korea is mandatory;
RECOGNISING that Directive (EU) 2016/681 of the European Parliament and the Council 1 is the basis for the transfers by air carriers of PNR data to the competent authorities of the Member States. Together with Regulation (EU) 2016/679 of the European Parliament and of the Council 2 and Directive (EU) 2016/680 of the European Parliament and of the Council 3 , Directive (EU) 2016/681 ensures a high level of protection of fundamental rights, in particular the rights to privacy and the protection of personal data.
HAVE AGREED AS FOLLOWS:
CHAPTER I
GENERAL PROVISIONS
ARTICLE 1
Objectives and scope
1. The objective of this Agreement is to enable the transfer of Passenger Name Record (PNR) data by air carriers from the Union to Korea and to lay down rules and conditions subject to which those PNR data may be processed by Korea.
2. The objective of this Agreement is also to enhance police and judicial cooperation between the Union and Korea in respect of PNR data.
3. The scope of this Agreement covers air carriers operating passenger flights between the Union and Korea as well as air carriers incorporated, or storing data, in the Union and operating flights to or from Korea.
ARTICLE 2
Definitions
For the purposes of this Agreement, the following definitions apply:
(1) "air carrier" means an air transport undertaking with a valid operating licence or equivalent permitting it to carry out carriage of passengers by air between the Union and Korea;
(2) "passenger" means any person, including persons in transfer or transit and excluding members of the crew, carried or to be carried in an aircraft with the consent of the air carrier, such consent being manifested by that person's registration in the passenger list;
(3) "Korean competent authority" means the Korean authority responsible for receiving and processing PNR data in accordance with Article 5 of this Agreement;
(4) "passenger name record" or "PNR" means a record of each passenger's travel requirements which contains information necessary to enable reservations to be processed and controlled by the booking and participating air carriers for each journey booked by or on behalf of any person, whether it is contained in reservation systems, departure control systems used to check passengers onto flights, or equivalent systems providing the same functionalities; specifically, as used in this Agreement, PNR data consists of the elements exhaustively listed in the Annex;
(5) "serious crime" means the offences punishable by a maximum custodial sentence or detention order of at least three years under the national law of Korea which have an objective link, even if only an indirect one, with the carriage of passengers by air;
(6) "terrorist offence" means:
(a) an act or omission that is committed for a political, religious or ideological purpose, objective or cause with the intention of intimidating the public with regard to its security, including its economic security, or with the intention of compelling a person, government or domestic or international organisation to do or refrain from doing any act, and that intentionally:
(i) causes death or serious bodily harm;
(ii) endangers an individual's life;
(iii) causes a serious risk to the health or safety of the public;
(iv) causes substantial property damage likely to result in the harm referred to in points (i), (ii) and (iii); or
(v) causes serious interference with or serious disruption of an essential service, facility or system, other than as a result of lawful or unlawful advocacy, protest, dissent or stoppage of work, such as a strike, that is not intended to result in the harm referred to in points (i), (ii) and (iii); or
(b) activities constituting an offence within the scope and as defined in applicable international conventions and protocols relating to terrorism; or
(c) knowingly participating in or contributing to or instructing a person, a group, or an organisation to carry out any activity for the purpose of enhancing a terrorist entity's ability to facilitate or carry out an act or omission referred to in point (a) or (b); or
(d) committing an indictable offence where the act or omission constituting the offence is committed for the benefit of, at the direction of, or in association with a terrorist entity; or
(e) collecting property or inviting a person, a group, or an organisation to provide, providing or making available property or financial or other related services for the purpose of carrying out an act or omission referred to in point (a) or (b) or using or possessing property for the purpose of carrying out an act or omission referred to in point (a) or (b); or
(f) attempting or threatening to commit an act or omission as referred to in point (a) or (b), conspiring, facilitating, instructing or counselling in relation to an act or omission described in (a) or (b), or being an accessory after the fact, or harbouring or concealing for the purpose of enabling a terrorist entity to facilitate or carry out an act or omission described in (a) or (b); or
(g) travelling to or from Korea or a Member State for the purpose of committing, or contributing to the commission of a terrorist offence within the meaning of point (a) or (b), or for the purpose of participating in the activities of a terrorist entity within the meaning of paragraph 7 with knowledge of the fact that such participation will contribute to the criminal activities of the terrorist entity.
(7) "terrorist entity" means:
(i) a person, a group, or an organisation that has as one of its purposes or activities facilitating or carrying out an act or omission referred to in paragraph 6 point (a) or (b); or
(ii) a person, a group, or an organisation that knowingly acts on behalf of, at the direction of or in association with such a person, group or organisation referred to in point (i).
CHAPTER II
TRANSFER OF PNR DATA
ARTICLE 3
Method and frequency of transfer
1. Korea shall ensure that air carriers transfer PNR data to the Korean competent authority exclusively by transmitting the required PNR data into the database of the requesting authority ("push" method), and in accordance with the following procedures to be observed by air carriers:
(a) by electronic means in compliance with the technical requirements of the Korean competent authority or, in the case of a technical failure, by any other appropriate means ensuring an appropriate level of data security;
(b) by using a mutually accepted messaging format, and in a secure manner using common protocols as required by the Korean competent authority;
(c) either directly or through authorised agents, who act on behalf of and under the responsibility of an air carrier, for the purpose of and under the conditions laid down in this Agreement.
2. Korea shall not require air carriers to provide elements of PNR data which are not already held or collected by air carriers for their reservation purposes or in the air carriers’ normal course of their business.
3. Korea shall ensure that the Korean competent authority deletes any data element transferred to it by an air carrier pursuant to this Agreement upon receipt of the PNR data, if that data element is not listed in the Annex.
4. Korea shall ensure that the Korean competent authority requires air carriers to transfer PNR data:
(a) on a scheduled basis with the earliest point in time being up to 48 hours before the scheduled departure; and
(b) a maximum of five times, for a particular flight.
5. Korea shall permit air carriers to limit the transfer referred to in point (b) of paragraph 4 to updates of the PNR data transferred as referred to in point (a) of that paragraph.
6. Korea shall ensure that the Korean competent authority informs air carriers of the specified times for the transfers.
7. In specific cases where there is an indication that additional access is necessary to respond to a specific threat related to the purposes set out in Article 4, the Korean competent authority may require an air carrier to provide PNR data prior to, between or after the scheduled transfers. In exercising this discretion, Korea shall act judiciously and proportionately and shall require the use of the method of transfer referred to in paragraph 1 of this Article.
CHAPTER III
PNR PROCESSING AND PROTECTION
ARTICLE 4
Purposes of PNR processing
Korea shall ensure that PNR data received pursuant to this Agreement are processed strictly for the purpose of preventing, detecting, investigating and prosecuting terrorist offences or serious crime.
ARTICLE 5
Modalities of PNR processing
The Korean competent authority may process PNR data exclusively by means of the following specific modalities of processing:
(a) carrying out an assessment of passengers prior to their scheduled arrival in or departure from Korea to identify persons who require further examination by the competent authorities, in view of the fact that such persons may be involved in a terrorist offence or serious crime in accordance with the real-time assessment carried out under Article 6;
(b) carrying out a search into the database of retained PNR data with a view to responding, on a case-by-case basis, to a duly reasoned request submitted pursuant to Articles 12 and 13 and, where appropriate, disclosing any relevant PNR data or the results of their processing;
(c) analysing PNR data for the purpose of updating, testing or creating new criteria to be used in the assessments carried out under Article 6(1)(b), in order to identify any persons who may be involved in a terrorist offence or serious crime;
ARTICLE 6
Real-time assessment
1. When carrying out an assessment referred to in point (a) of Article 5, the Korean competent authority may:
(a) compare PNR data only against databases on persons or objects sought or under alert, in accordance with international and national rules applicable to such databases; and
(b) process PNR data against pre-determined criteria.
2. Korea shall ensure that the databases referred to in paragraph 1(a) of this Article are non-discriminatory, reliable, up to date and relevant for the purposes set out in Article 4.
3. Korea shall ensure that any assessment of PNR data as referred to in paragraph 1(b) of this Article is based on non-discriminatory, specific and reliable pre-established models and criteria to enable the Korean competent authority to arrive at results targeting individuals who might be under a reasonable suspicion of involvement or participation in terrorist offences or serious crime. Korea shall ensure that those criteria are in no circumstances based on a person's race or ethnic origin, political opinions, religion or philosophical beliefs, trade union membership, health, sexual life or sexual orientation.
4. Korea shall ensure that any positive match resulting from the real-time processing of PNR data is individually reviewed by the Korean competent authority by non-automated means.
ARTICLE 7
Special categories of data
1. Any processing of PNR data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, and the processing of genetic data, biometric data for the purpose of uniquely identifying a natural person, of data concerning health or data concerning a natural person's sex life or sexual orientation shall be prohibited under this Agreement.
2. To the extent that the PNR data received under this Agreement by the Korean competent authority include such special categories of personal data, the Korean competent authority shall delete such data immediately.
ARTICLE 8
Data security and integrity
1. Korea shall ensure that PNR data received under this Agreement are processed in a manner that ensures a high level of data security appropriate for the risks represented by the processing and the nature of PNR data received under this Agreement. In particular, the Korean competent authority shall:
(a) implement appropriate technical and organisational measures and procedures to ensure such level of security;
(b) apply encryption, authorisation, and documentation procedures to the PNR data;
(c) limit access to PNR data to authorised staff; and
(d) store PNR data in a secure physical environment that is protected with access controls.
2. Korea shall ensure that any data security breach, in particular leading to accidental or unlawful destruction or accidental loss, alteration, unauthorised disclosure or access, or any unlawful forms of processing is subject to effective and dissuasive corrective measures.
3. Korea shall report any breach of data security to the overseeing authority(ies) referred to in Article 15.
ARTICLE 9
Logging and documenting of PNR data processing
1. The Korean competent authority shall log and document all processing of PNR data. Korea shall use such a log or documentation only to:
(a) self-monitor and to verify the lawfulness of data processing;
(b) ensure proper data integrity or system functionality;
(c) ensure the security of data processing; and
(d) ensure oversight and accountability of the public administration.
2. Logs or documentation kept under paragraph 1 shall be communicated upon request to the overseeing authority(ies) which shall use this information only for the oversight of data protection and for ensuring proper data processing as well as data integrity and security.
CHAPTER IV
STORAGE AND DISCLOSURE OF PNR DATA
ARTICLE 10
Retention periods
1. Korea shall not retain PNR data for more than five years from the date that it receives the PNR data.
2. Korea shall review the PNR data retention period every two years and determine whether it remains commensurate with the level of risk of terrorism and serious transnational crime originating from and transiting through the European Union. Korea shall provide a classified report to the European Union outlining the outcome of the review, including the level of risk identified, factors considered in minimising the data retention period, and the related retention decision.
3. PNR data may be retained under this Agreement beyond the passengers’ date of departure, where Korea considers that there is a connection with the purposes set out in Article 4, based on objective elements from which it may be inferred that the PNR data might make an effective contribution to addressing those purposes.
4. At the expiry of the appropriate retention period, Korea shall ensure that PNR data are irrevocably deleted in such a manner that the data subjects concerned are no longer identifiable.
5. By way of derogation from paragraph 1, Korea may allow the retention of PNR data required for review, investigation, enforcement action, judicial proceedings, prosecution, or the enforcement of penalties, until the relevant process is concluded.
ARTICLE 11
Depersonalisation
1. The Korean competent authority shall depersonalise PNR data at the latest six months after they are received. It shall do so through masking out the following data elements which could serve to identify directly the passenger to whom the PNR data relate:
(a) name(s), including the names of other passengers on the PNR and number of travelers on the PNR travelling together;
(b) address and contact information;
(c) all forms of payment information, including billing address, to the extent that it contains any information which could serve to identify directly the passenger to whom the PNR data relate or any other persons;
(d) frequent flyer information;
(e) general remarks to the extent that they contain any information which could serve to identify directly the passenger to whom the PNR data relate; and
(f) any API data that have been collected.
2. The Korean competent authority may disclose the data elements referred to in paragraph 1 of this Article only for the purposes of Article 4 and under the conditions of Articles 12 or 13.
ARTICLE 12
Disclosure within Korea
1. When responding to a duly reasoned request sent by another Korean government authority in accordance with Article 5(b), the Korean competent authority shall disclose, on a case-by-case basis, PNR data or the results of their processing, only where:
(a) the PNR data is disclosed to government authorities whose functions are directly related to the purposes set out in Article 4 and to the extent that such disclosure is necessary for the achievement of those purposes;
(b) the minimum amount of PNR data necessary is disclosed;
(c) the receiving competent authority affords protection equivalent to the safeguards provided for in this Agreement;
(d) the disclosure is approved by either a judicial authority or another independent body competent under national law to verify whether the conditions for disclosure are met.
2. By way of derogation from point (d) of paragraph 1, the Korean competent authority may disclose PNR data in cases of duly justified urgency without prior review or approval. In such cases, the review referred to in point (d) of paragraph 1 must take place within a short time.
3. Korea shall ensure that the receiving government authority does not disclose PNR data to another authority unless the disclosure is explicitly authorised by the Korean competent authority.
ARTICLE 13
Disclosure outside Korea and the EU
1. When responding to a duly reasoned request sent by a government authority of countries other than the Member States in accordance with Article 5(b), the Korean competent authority shall disclose, on a case-by-case basis, PNR data or the results of their processing, only where:
(a) such disclosure is necessary to achieve one of the purposes set out in Article 4;
(b) the minimum amount of PNR data necessary is disclosed;
(c) the country to the authority of which the PNR data are to be disclosed has either concluded an Agreement with the Union that provides for protection of personal data comparable to this Agreement or is subject to a decision of the European Commission pursuant to Union law, finding that said country ensures an adequate level of data protection within the meaning of Union law; and.
(d) the disclosure is approved by either a judicial authority or another independent body competent under national law to verify whether the conditions for disclosure are met.
2. By way of derogation from paragraph 1(c), the Korean competent authority may disclose PNR data to another country if it considers that the disclosure is necessary for the prevention or investigation of a serious and imminent threat to public security, and if that country provides a written assurance, pursuant to an arrangement, agreement or otherwise, that the information will be protected in line with the safeguards set out in this Agreement.
3. By way of derogation from paragraph 1(d), the Korean competent authority may disclose PNR data in cases of duly justified urgency without prior review and approval. In such cases, the review referred to in point (d) of paragraph 1 must take place within a short time.
ARTICLE 14
Exchange of PNR-related information
1. The Korean competent authority shall share with Europol or Eurojust, within the scope of their respective mandates, or with the Passenger Information Units of the Member States, PNR data, the results of processing those data, or analytical information based on PNR data, as soon as possible and in specific cases where necessary to prevent, detect, investigate, or prosecute terrorist offences or serious crime. The Korean competent authority shall share such information either on its own initiative or at the request of Europol or Eurojust, within the scope of their respective mandates, or of the Passenger Information Units of the Member States.
2. The Passenger Information Units of Member States shall share with the Korean competent authority PNR data, the results of processing those data, or analytical information based on PNR data, as soon as possible and in specific cases where necessary to prevent, detect, investigate, or prosecute terrorist offences or serious crime. The Passenger Information Units of Member States shall share such information on their own initiative or at the request of the Korean competent authority.
3. The Parties shall ensure that the information referred to in paragraphs 1 and 2 is shared in accordance with applicable rules on law enforcement cooperation or information sharing between Korea and Europol or Eurojust, or the relevant Member State. In particular, the exchange of information with Europol under this Article shall take place through a secure communication channel established for the exchange of information.
CHAPTER V
DATA PROTECTION
ARTICLE 15
Oversight
1. The data protection safeguards for the processing of PNR data under this Agreement shall be subject to oversight by one or more independent public authorities (the ‘overseeing authorities’). Korea shall ensure that the overseeing authorities have effective powers to investigate compliance with the rules related to the collection, use, disclosure, retention, or disposal of PNR data. The overseeing authorities may conduct compliance reviews and investigations, may report findings and may make recommendations to the Korean Competent Authority. Korea shall ensure that the overseeing authorities have the power to refer violations of law related to this Agreement for prosecution or disciplinary action, when appropriate.
2. Korea shall ensure that the overseeing authorities ensure that complaints relating to non-compliance with this Agreement are received, investigated, responded to, and appropriately redressed.
3. In addition, Korea shall apply this Agreement subject to independent review by other designated public entities that have the mandate to ensure the oversight or accountability of the public administration.
ARTICLE 16
Transparency and information
1. Korea shall ensure that the Korean competent authority makes the following information available on its website:
(a) a list of the legislation authorising the transfer of PNR data by air carriers;
(b) the reason for the collection and storage of PNR data;
(c) the manner of processing and protecting the PNR data;
(d) the manner and extent to which the PNR data may be disclosed to other competent authorities; and
(e) contact information for inquiries.
2. Korea shall work with interested third parties, such as the aviation and air travel industry, to promote transparency at the time of booking regarding the reasons for the collection and processing of PNR data, and regarding how to request access, rectification and redress to those PNR data.
3. If PNR data retained in accordance with Article 10 has been disclosed in accordance with Articles 12 or 13, Korea shall inform, taking into account reasonable efforts, the passengers concerned in writing and within a reasonable time once such notification is no longer liable to jeopardise the investigations by the public authorities concerned to the extent the relevant contact information of the passengers is available or can be retrieved. The notification shall include information on how the individual concerned can seek administrative or judicial redress pursuant to Article 19.
ARTICLE 17
Access by individuals to their PNR data
1. Korea shall ensure that any individual may access their PNR data.
2. Korea shall ensure that the Korean Competent Authority, within a reasonable time:
(a) provides the individual with a copy of their PNR data if the individual makes a written request for their PNR data;
(b) replies in writing to any request;
(c) provides the individual with access to recorded information confirming that the individual's PNR data has been disclosed, if the individual requests that confirmation;
(d) sets out the legal or factual reasons for any refusal to allow access to the individual's PNR data; and
(e) informs the individual that they may make a complaint and of the complaint procedure.
2. For important reasons of public interest, Korea may make any access to information under this Article subject to reasonable legal requirements and limitations, including any limitations necessary to prevent, detect, investigate, or prosecute criminal offences, or to protect public or national security, with due regard for the legitimate interests of the individual concerned.
ARTICLE 18
Correction or annotation for individuals
1. Korea shall ensure that any individual may request the correction of their PNR data.
2. Korea shall ensure that the Korean Competent Authority considers all written requests for correction and shall, within a reasonable time:
(a) correct the PNR data and notify the individual that the correction has been made; or
(b) refuse all or part of the correction, (i) attaching a note to the PNR data reflecting any correction requested that was refused and (ii) notifying the individual that the request for correction is refused, and set out the legal or factual reasons for the refusal.
3. Korea shall inform the requesting individual that they may make a complaint and of the complaint procedure.
ARTICLE 19
Administrative and judicial redress
1. Korea shall ensure that an independent public authority receives, investigates and responds to complaints lodged by an individual concerning their request for access, correction or annotation of their PNR data. Korea shall ensure that the relevant authority notifies the complainant of the means of seeking the judicial redress set out in paragraph 2.
2. Korea shall ensure that any individual who is of the view that their rights have been infringed by a decision or action in relation to their PNR data may seek effective judicial redress in accordance with Korean law by way of judicial review or such other remedy that may include compensation:
CHAPTER VI
FINAL PROVISIONS
ARTICLE 20
Notifications
1. Korea shall inform the Union through diplomatic channels in writing of the details of the following authorities:
(a) the Korean competent authority referred to in Article 2(3);
(b) the independent overseeing authorities as referred to in Article 15;
(c) the judicial authority or another independent body competent under national law, as referred to in Articles 12 and 13.
2. Korea shall notify without delay any changes to the information referred to in paragraph 1.
3. The Union shall make the information referred to in paragraphs 1 and 2 available to the public.
ARTICLE 21
Entry into force
1. This Agreement shall be approved by the Parties in accordance with their own internal procedures.
2. This Agreement shall enter into force on the first day of the month following the date of the receipt of the written information by which Korea has notified the Union of the authorities referred to in Article 20(1) or the written notifications by which the Parties have notified each other through diplomatic channels that the procedures referred to in paragraph 1 of this Article have been completed, whichever is the later.
ARTICLE 22
Dispute resolution and suspension
1. The Parties shall resolve any dispute regarding the interpretation, application or implementation of this Agreement through consultations with a view to reaching a mutually acceptable resolution, including providing an opportunity for either Party to comply within a reasonable time.
2. Either Party may suspend in whole or in part the application of this Agreement by notification in writing to the other Party through diplomatic channels. Such written notification shall not be made until after the Parties have engaged in a period of consultation no longer than 2 months. The suspension shall come into effect two months from the date of such notification, unless the Parties jointly decide otherwise.
3. The Party that has suspended the application of this Agreement shall immediately inform the other Party of the date on which the application of this Agreement will resume, once it considers that the reasons for the suspension no longer apply. The suspending Party shall notify the other Party in writing.
4. Korea shall continue to apply the terms of this Agreement to all PNR data received before any suspension of this Agreement.
ARTICLE 23
Termination
1. This Agreement may be terminated at any time by either of the Parties by written notification through diplomatic channels. The termination shall take effect three months after the date of receipt of the written notification.
2. If either Party gives notice of termination under this Article, the Parties shall, through consultations, decide what measures are needed to ensure that any cooperation initiated under this Agreement is concluded in an appropriate manner.
3. Korea shall continue to apply the terms of this Agreement to all PNR data received before any termination of this Agreement.
ARTICLE 24
Amendments
1. This Agreement may be amended at any time by mutual consent between the Parties. The amendments to this Agreement shall be approved by the Parties in accordance with their own internal procedures and shall enter into force on the first day of the month following the date of the receipt of the last written notification by which the Parties have notified each other through diplomatic channels of the completion of their internal procedures necessary for the approval of the Agreement. .
2. The Annex to this Agreement may be updated, by mutual consent between the Parties expressed by written notification exchanged through diplomatic channels. Such updates shall enter into force on the first day of the month following the date of the receipt of the last written notification.
ARTICLE 25
Consultation and evaluation
1. The Parties shall enter into consultation with respect to issues related to the monitoring of the implementation of this Agreement. They shall advise each other of any measure that may affect this Agreement.
2. The Parties shall carry out a joint evaluation of the implementation of this Agreement if requested by either Party and jointly decided. In conducting such an evaluation, the Parties shall pay special attention to the necessity and proportionality of processing PNR data for each of the purposes set out in Article 4. The Parties shall decide in advance on the modalities of such evaluations. Such consultations may lead one or both Parties to propose an amendment to the Agreement. Such proposal shall be submitted in written form and any such amendment shall follow the procedure laid out in Article 24.
ARTICLE 26
Territorial application
1. This Agreement shall apply to the territory of the Union in accordance with the Treaty on European Union and the Treaty on the Functioning of the European Union and to the territory of Korea.
2. By the date of entry into force of this Agreement, the Union shall notify Korea of the Member States to the territories of which this Agreement applies. It may subsequently, at any time, notify any changes thereto.
This Agreement shall be drawn up in duplicate in the Bulgarian, Croatian, Czech, Danish, Dutch, English, Estonian, Finnish, French, German, Greek, Hungarian, Irish, Italian, Latvian, Lithuanian, Maltese, Polish, Portuguese, Romanian, Slovak, Slovenian, Spanish, Swedish and Korean languages, each text being equally authentic. In the event of any divergence between the texts of this Agreement, the English text shall prevail.
--
ANNEX
PASSENGER NAME RECORD DATA ELEMENTS
REFERRED TO IN ARTICLE 2(4)
1. PNR record locator
2. Date of reservation/issue of ticket
3. Date(s) of intended travel
4. Name(s)
5. Address and contact information, namely telephone number and email address relating to the passengers
6. Information relating to the payment methods for, and billing of, the air ticket
7. Complete travel itinerary for specific PNR
8. Frequent flyer data relating to the passenger(s) (status and frequent flyer number)
9. Travel agency/travel agent
10. Travel status of passenger, including confirmations, check-in status, no-show or go-show information
11. Split/divided PNR information
12. Information relating to unaccompanied minors under 18 years: name, gender, age, language(s) spoken, name and contact details of guardian on departure and relationship to the minor, name and contact details of guardian on arrival and relationship to the minor, name of departure and arrival agent
13. Ticketing field information, including ticket number, date of ticket issuance and one-way tickets, automated ticket fare quote fields
14. Seat number and other seat information
15. Code share information
16. All baggage information
17. Number and other names of travellers on the PNR
18. Any advance passenger information (API) data elements as far as already collected by carriers
19. All historical changes to the PNR listed in points 1 to 18
________________