In carrying out such an assessment the Passenger Information Unit may compare PNR data against relevant databases, including national databases or national mirrors of Union databases, on persons or objects sought or under alert, in accordance with Union and national rules applicable to such databases for the purpose of preventing, detecting, investigating and prosecuting terrorist offences and serious transnational crime.

(a) carrying out an assessment of the passengers prior to their scheduled arrival to, or departure from, the Member State in order to identify any persons who may be involved in a terrorist offence or serious transnational crime and who require further examination by the competent authorities referred to in Article 5 and, where relevant, by Europol, in accordance with Article 7a. In carrying out such an assessment, the Passenger Information Unit may process PNR data against pre-determined criteria in accordance with this Directive, and may compare PNR data against relevant databases, including international or national databases or national mirrors of Union databases, where they are established in compliance with Union law, on p ...[+++]ersons or objects sought or under alert, in accordance with Union, international and national rules applicable to such files, in accordance with the requirements set out in paragraph 3.

Pursuant to Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 on the protection of individuals with regard to the processing of personal data and on the free movement of such data , consumers should be informed by creditors of the consultation of the credit database prior to its consultation, and should have the right to access the information held on them in such a credit database in order to, where necessary, rectify, erase or block the personal data concerning them processed therein where it is inaccurate or has been unlawfully processed.

30. Stresses that the use of cloud services by public authorities, including by law enforcement authorities and EU institutions, requires special consideration and coordination between the Member States; recalls that data integrity and security must be guaranteed and unauthorised access, including by foreign governments and their intelligence services without a legal basis under Union or Member State law, prevented; stresses that this also applies to the specific processing activities of certain essential non-governmental services, in particular the processing of specific categories of personal data, such as by banks, insurance companies, pension funds, schools and hospitals; stresses, furthermore, that all of the aforementioned is of pa ...[+++]rticular importance if data is being transferred (outside the European Union between different jurisdictions); takes the view, therefore, that public authorities, as well as non-governmental services and the private sector, should, as far as possible, rely on EU cloud providers when processing sensitive data and information until satisfactory global rules on data protection have been introduced, ensuring the security of sensitive data and of data bases held by public entities;

Background to the verification of the legal basis

As a possible safeguard against cost overruns and delays resulting from changing requirements, any new information system in the area of freedom, security and justice, particularly if it involves a large-scale IT system, will not be developed before the underlying legal instruments setting out its purpose, scope, functions and technical details have been definitively adopted.