PNR Agreements and related cybersecurity risks

master's thesis

• Title (croatian): PNR sporazumi i povezana prijetnja kibernetičkoj sigurnosti
• Author: Mihaela Mrežar
• Mentor: Iva Savić (mentor)
• Committee member: Iva Savić (predsjednik povjerenstva)
• Committee member: Jasenko Marin (član povjerenstva)
• Committee member: Irena Majstorović (član povjerenstva)
• Granter: University of Zagreb; Faculty of Law; (Maritime and General Transport Law); Zagreb
• Defense date and country: 2023-09-11, Croatia
• Scientific / art field, discipline and subdiscipline: SOCIAL SCIENCES; Law

Abstract

Korištenje podataka iz evidencije imena putnika (PNR) u sigurnosne svrhe počelo je u SAD-u 2001. godine, nakon terorističkog napada 11. rujna. Od tada SAD koristi svoj utjecaj za sklapanje sporazuma s drugim državama koji bi im omogućili razmjenu podataka o putnicima i postizanje boljih rezultata korištenjem PNR sustava. Prvi PNR sporazum između EU-a i SAD-a potpisan je 2004. godine, ali je od tada dva puta ponovno pregovaran zbog neusklađenosti s postojećim propisima o ljudskim pravima. Interes EU-a za PNR i vlastitu strategiju za borbu protiv terorizma, iako je isprva bio nedvojbeno pod utjecajem SAD-a, nakon terorističkih napada 2015. i 2016. konačno je kulminirao donošenjem Direktive o PNR-u. Nedavno se pokazalo da su PNR podaci meta sve većeg broja kibernetičkih napada, uzrokujući značajnu financijsku štetu i zrakoplovnim prijevoznicima i njihovim putnicima. Kibernetički napadi počinjeni sa specifičnim ciljem dobivanja informacija predmet su kako propisa o sigurnosti zračnog prometa, tako i zaštite podataka. Ovaj rad ima za cilj ispitati odredbe PNR sporazuma koje je EU sklopila s drugim državama, kao i PNR Direktivu, te relevantne sudske odluke. Naglasak će biti stavljen na problematiku kibernetičkih napada na zrakoplovnu industriju počinjenih s ciljem krađe podataka o putnicima, karakteristikama kibernetičkih napada te međunarodnim dokumentima koji reguliraju kibernetičku sigurnost i njihovu primjenjivost na kibernetičke napade.

Abstract (english)

The use of Passenger Name Records (PNR) data for security purposes, started in the USA in 2001, following the 9/11 terrorist attack. Ever since, the USA have been using their influence to enter into agreements with other states that would allow them to exchange passenger data and achieve better results using the PNR system. The first PNR agreement between the EU and USA was signed in 2004, but has since been re-negotiated twice, due to its incompability with existing human rights regulations. The EU interest in PNR and its own counter-terrorism strategy, while at first undoubtedly influenced by the USA, after the terrorist attacks in 2015 and 2016 finally culminated in the adoption of a Directive on PNR. PNR data has more recently been shown to be a target of a growing number of cyberattacks, causing significant financial damage to both airlines and their passengers. Cyberattacks committed with the specific goal of obtaining information are a subject of both aviation security regulation as well as data protection. This paper aims to examine the provisions of PNR agreements concluded by the EU with other states as well as the PNR Directive, and the relevant judicial decisions. An emphasis will be put on the issue of cyberattacks targeting the aviation industry with the goal of obtaining passenger data, their characteristics and the international documents regulating cybersecurity and their applicability to cyberattacks.

• Keywords: PNR podatci; civilno zrakoplovstvo; kibernetički napad; kibernetička sigurnost; PNR sporazum; terorizam
• Keywords (english): PNR data; civil aviation; cyberattack; cybersecurity; PNR agreement; terrorism
• Language: english
• URN:NBN: urn:nbn:hr:199:028078
• Study programme: Title: Law; Study programme type: university; Study level: integrated undergraduate and graduate; Academic / professional title: magistar/magistra prava (magistar/magistra prava)
• Type of resource: Text
• File origin: Born digital
• Access conditions: Open access
• Created on: 2023-09-19 07:47:56