Learn how to request passenger manifest confidentiality, limit unnecessary disclosures and understand which government filings cannot be restricted.
To request passenger manifest confidentiality from your charter broker, submit a written confidentiality instruction before booking is confirmed, ask for a Non-Disclosure Agreement (NDA) covering all parties in the chain, and clarify which regulatory disclosures cannot be withheld — because some government agencies have unconditional access to manifest data regardless of any private agreement.
Why is passenger manifest privacy a concern in private aviation?
Passenger manifests contain sensitive personal data — full legal names, dates of birth, passport or government-ID numbers, and sometimes nationalities. For high-profile individuals, executives, or families traveling together, exposure of this information through a breach, a subcontract, or an operator’s filing can create security, reputational, or competitive risks. Unlike commercial airlines, charter clients often assume their flight details are inherently private, but several parties in the booking chain — broker, operator, handling agent, and sometimes a fuel supplier — may each receive a copy of the manifest.
What should a confidentiality request include?
Send the request before signing the charter agreement so the requirements can be incorporated into the booking. A clear request should specify:
Sample passenger confidentiality request
Subject: Passenger confidentiality instructions for [trip/date]
Please treat all passenger identity, itinerary and manifest information associated with this trip as confidential. Information should be disclosed only to personnel, the direct air carrier, operational service providers and government authorities with a legitimate legal or operational need.
Please identify the direct air carrier, confirm that it has received these instructions and explain any required retention periods. Passenger information should not be used for marketing, publicity or any unrelated purpose and should be securely deleted or anonymized when it is no longer required.
Please notify us promptly of any unauthorized access or disclosure and confirm acceptance of these instructions in writing before the booking is finalized.
Which disclosures are legally mandatory and cannot be made confidential?
Some disclosures are mandatory and cannot be prevented through an NDA. In the United States, the Transportation Security Administration (TSA) and Customs and Border Protection (CBP) require advance passenger information for all flights, including private charters operating under Part 135. CBP’s Electronic Advance Passenger Information System (eAPIS) mandates submission of full manifest data before international departures and arrivals. According to the TSA, private charter operators must vet passengers against the No Fly List and Selectee List for flights above certain weight thresholds. In the European Union, the GDPR governs how personal data within the manifest is processed and retained, but it does not override the EU Passenger Name Record (PNR) Directive’s law-enforcement access rights. No broker or operator can lawfully withhold manifest data from these authorities, and any vendor promising to do so entirely should be treated with caution.
How does a Non-Disclosure Agreement actually work in this context?
An NDA in a charter context is typically a bilateral or multilateral agreement that prohibits each signatory from disclosing manifest contents to any party not named as a permitted recipient. When negotiating one, confirm that it explicitly covers the operator (not just the broker), sets a clear penalty or remedy for breach, and distinguishes between voluntary disclosure and compelled regulatory disclosure. Some brokers include data-protection addenda as standard; others will add them on request. Always ask for a copy of the operator’s own data-handling policy before the flight, since the broker cannot bind the operator to terms the operator has not agreed to.
What practical steps should I take before and after the flight?
Before the flight, confirm in writing that your broker has forwarded the confidentiality terms to the operating carrier and that the operator has acknowledged them. After the flight, follow up to request written confirmation that manifest copies held by non-regulatory parties have been deleted in accordance with your agreement. Keep a record of all correspondence. If the charter involves multiple legs or a repositioning flight with a different crew, re-confirm that the replacement operator is also bound.
For a broader view of how charter booking agreements are structured, Flight Club’s guide to charter agreements covers what clients should review before signing.
Frequently Asked Questions
Can a charter broker guarantee complete passenger manifest confidentiality? No broker can guarantee it in absolute terms, because regulatory bodies such as CBP, TSA, and equivalent authorities in other jurisdictions have statutory rights to access manifest data that no private contract can override. What a broker can guarantee is that it will not voluntarily disclose your manifest beyond the minimum parties required by law and operations.
Does the GDPR protect my passenger data on a private charter? GDPR applies when personal data of EU residents is processed, meaning European brokers and operators must handle manifest data lawfully, store it securely, and delete it when it is no longer needed. However, GDPR does not prevent disclosure to law-enforcement or border-control authorities operating under the EU PNR Directive — those access rights take precedence.
Should I request an NDA from the broker, the operator, or both? Ideally both. The broker controls its own staff and systems, but the operating carrier controls cockpit documentation, handling-agent briefings, and trip sheets. An NDA that covers only the broker leaves a significant gap in the chain. Ask the broker to confirm that its contract with the operator includes data-protection obligations, and request written confirmation from the operator directly if possible.
What information is typically included in a private charter passenger manifest? A standard charter manifest includes each passenger’s full legal name, date of birth, nationality, travel document type and number, and sometimes contact details. For international flights, passport expiry dates and issuing country are also required. Some operators add seat assignments or dietary notes, which are internal records that carry no regulatory filing requirement and can more readily be restricted from third-party access.
FAQ
Can a charter broker guarantee complete passenger manifest confidentiality?
No broker can guarantee it absolutely, because regulatory authorities such as CBP and TSA have statutory rights to manifest data that no private contract can override. A broker can only guarantee it will not make voluntary disclosures beyond what law and operations require.
Does the GDPR protect my passenger data on a private charter?
GDPR applies to European brokers and operators processing EU residents’ personal data, requiring secure handling and timely deletion, but it does not prevent access by law-enforcement or border authorities operating under the EU PNR Directive.
Should I request an NDA from the broker, the operator, or both?
Both, ideally — the broker controls its own staff and systems, while the operating carrier controls cockpit documentation and handler briefings, so an NDA covering only the broker leaves a meaningful gap.
What information is typically included in a private charter passenger manifest?
A standard charter manifest includes each passenger’s full legal name, date of birth, nationality, and travel document type and number; international flights also require passport expiry dates and issuing country.
Back to top