What passenger data must be shared under the 2026 UK/EU Treaty in relation to Gibraltar?

Short answer

The 2026 UK/EU Treaty in relation to Gibraltar requires carriers to transfer Passenger Name Record (PNR) and Advance Passenger Information (API) data for flights arriving in Gibraltar from outside the Schengen area to the competent Spanish authorities. Transfers must comply with the relevant EU rules on PNR and API.

Detailed answer

These obligations support security screening at Gibraltar’s external border. Since the land frontier with Spain no longer has routine checks, Schengen entry checks take place at Gibraltar’s airport and port, and advance passenger data allows risk assessment before arrival.

The data-sharing framework forms part of the broader security architecture that replaces land border checks, alongside law enforcement cooperation with Spain, Europol and Eurojust.

Status: the Agreement was signed on 14 July 2026 and has been provisionally applied since 15 July 2026, pending formal ratification by the UK and the EU.