Beginning April 1, 2025, all international airlines serving India will be mandated to submit comprehensive passenger details to the nation’s customs authorities, as declared by the Central Board of Indirect Taxes and Customs. Airlines that fail to adhere to this mandate may face penalties ranging from INR 25,000 to INR 50,000 for each non-compliance incident.
The mandate stems from the ‘Passenger Name Record Information Regulations, 2022,’ which requires airlines to enroll with the National Customs Targeting Centre-Passenger by January 10, 2025. The regulation is applicable to every passenger on international flights entering or leaving India, including those from the UAE and involves passengers who are in transit or transferring.
The required information airlines must share includes the passenger’s name, billing details, ticket issue date, travel plans, the names of fellow travelers on the same booking reference, and the complete itinerary.
In addition, airlines are obliged to transmit other details such as contact information, including email addresses and mobile numbers, travel agency specifics, luggage details, and codeshare agreements to the National Customs Targeting Centre-Passenger.
This policy aims to bolster risk assessment and enhance border security measures. The customs department recently indicated that a pilot for the PNRGOV system to gather necessary passenger data is set to start on February 10, 2025, with a full-scale deployment slated from April 1, 2025, for individual airlines and from June 1, 2025, for those operating through a global distribution system.
Under these new regulations, airlines are expected to ensure the confidentiality of passenger information by securely managing data such as names, contact information, and travel details. The processing of sensitive information pertaining to race, religion, political affiliations, or health specifics is explicitly forbidden.
Managed by the National Customs Targeting Centre-Passenger, this data will be securely handled and accessible only to authorized personnel, with strict privacy safeguards in place. Data will be stored for a maximum of five years, after which it must be anonymized, unless required for investigations, legal actions, or security matters, to uphold privacy and regulatory compliance.
