New passenger data law to bolster national security

Barbados is moving forward with landmark legislation that will grant expanded pre-arrival screening powers to the country’s immigration authorities, a reform government officials say will modernize border security and block transnational threats ranging from terrorism to organized crime. The proposed legislation, the Advance Passenger Information and Passenger Name Record Bill, also includes robust safeguards for personal privacy, enables coordinated cross-border information sharing among CARICOM member states, and explicitly bans discriminatory profiling based on racial, ethnic or other personal characteristics.

Home Affairs Minister Gregory Nicholls introduced the bill for its second reading in the country’s House of Assembly on Tuesday evening. The legislation lays out a formal legal framework for the collection, transmission, processing, storage, secure sharing and protection of advance passenger information and passenger name records for all people entering or exiting Barbados via air or sea travel.

Nicholls explained that the new framework adds a critical layer of national security that in-person checks at ports of entry alone can no longer provide. “This bill will strengthen Barbados’ ability to know in advance who is travelling, to assess whether any persons pose risks to the country, to the border security apparatus, to public safety and national security, and it responds to a threat long before any passenger reaches our borders,” he said.

Against a backdrop of rising transnational criminal activity that exploits gaps in outdated border management systems, Nicholls framed the bill as an essential frontline tool for national security. Transnational threat actors including terrorist networks, drug traffickers, human smuggling rings, arms dealers and document forgers rely on porous border systems, anonymity and mobility to move between countries, he noted. “These international criminals move between airports [and] seaports; they move between reservation systems and travel networks,” Nicholls added.

The core structural shift brought by the bill is the modernization of Barbados’ border security architecture, moving the country from a reactive, on-arrival screening model to a proactive, prevention-focused system. Nicholls emphasized that the reform will significantly boost the country’s border security and immigration enforcement capacity, improve risk identification and analysis, upgrade intelligence and control infrastructure, and enable more effective collaboration with regional and global security partners.

To deliver on these goals, the legislation will require a major overhaul of the Immigration Department’s internal operating structure and enforcement capacity. “I’ve had to discuss with the Immigration Department how we in Barbados are able to enhance our enforcement capacity unit within the Immigration Department. This legislation will require a complete overhaul and rethink of the internal mechanisms of how the staff are organised, but certainly we will have to be beefing up our immigration enforcement capacity,” Nicholls said.

The minister clarified that the expanded enforcement capacity will not mirror the controversial hardline model of U.S. Immigration and Customs Enforcement (ICE), which has faced widespread criticism for aggressive immigration crackdowns, but acknowledged that stronger enforcement is a necessary priority for Barbados.

He added that airlines have already begun adapting to new pre-arrival information requirements, which allow officials to verify traveler identities, cross-check travel details, flag discrepancies, and spot fraudulent travel documents that would otherwise go undetected at on-arrival screening. “It cannot be denied also that the prevalence of fraudulent travel documents, false identities, manipulated travel patterns can be used to evade border controls. The immigration department has detected people with two and three passports, with two or three different identities. They’ve detected passports that look real, birth certificates and other travel information that to the naked eye presents as real,” Nicholls said. “Some of them are laminated; people say that they do that so that they can withstand the rigours of travelling, or that they use these documents so often and it’s difficult to get a reproduced document in their native land and therefore they have to laminate these documents, but on closer examination and scrutiny, you can tell that these documents are all forged.”

Barbados is the latest CARICOM member state to adopt the regional bloc’s model legislation for advance passenger data collection, a move that will formalize legal information sharing with both regional and international security partners when appropriate and compliant with domestic law.

To address public concerns about government overreach and unauthorized surveillance, Nicholls outlined a series of binding privacy safeguards written into the bill. All collection, processing, storage and sharing of passenger data must comply with Barbados’ existing Data Protection Act and constitutional protections for personal privacy, he stressed, rejecting claims that the new system would function as a mass surveillance “Big Brother” mechanism.

The legislation requires the appointment of an independent data protection officer, who will operate autonomously with no conflicts of interest to monitor compliance, conduct regular risk assessments, oversee data protection impact reviews, handle public complaints, and advise immigration leadership on privacy compliance. It also mandates human review of all automated screening matches: any potential risk flag generated by automated systems must be reviewed by a trained immigration officer before any enforcement action is taken against a traveler or crew member.

“This human review of automated decisions is an essential statutory feature of this bill. This is an important safeguard in any modern system that uses technology for efficiency but does not surrender the final judgment to automation. The bill therefore ensures that technology assists in the decision-making process rather than replaces the element of human accountability,” Nicholls explained.

The bill explicitly prohibits the use of screening criteria based on race, ethnic origin, religion, philosophical beliefs, political opinions, trade union membership, health, sexual life or sexual orientation, eliminating any legal space for discriminatory profiling. Access to passenger data is also strictly restricted: no other government ministry or agency can directly access the passenger database, and all information requests must go through formal channels, with final approval from the Chief Immigration Officer.

Strict data retention rules are also written into the legislation: passenger name record data must be depersonalized, with all direct identifiers removed, after six months. The maximum general retention period for all advance passenger and passenger name record data is seven years, after which all data must be permanently deleted unless it is required for an active investigation, ongoing threat assessment or pending prosecution. Travelers also retain legal rights to access their own stored data, request corrections to inaccurate information, and lodge complaints with the independent data protection officer. Any serious data breach that threatens personal privacy must be reported to the data protection officer without undue delay.

Instead of treating all compliance failures as criminal offenses, the legislation establishes a graduated administrative penalty regime for data breaches and other violations. Before any penalty is imposed, accused parties must receive formal notice of the alleged violation and an opportunity to respond. The Chief Immigration Officer is required to consider factors including the nature and severity of the breach, any harm caused, whether the violation was intentional, and any steps taken to remediate the issue and prevent recurrence. All penalty decisions must be issued in writing with a full statement of reasons, and affected parties have the right to appeal penalties to the Barbados High Court.

Nicholls wrapped up his address by clarifying the scope of the legislation: “I want to reiterate this is not intended to be an immigration bill; [it] only is indeed a national security bill, a border management bill, and a modern border management law enforcement all in one. This bill purports to give the State of Barbados the necessary tools to protect the public, strengthen the integrity of our immigration system, and ensure that lawful travel is facilitated with ease while the risk is managed intelligibly.”