PNR data derived from flights to, from, or through the United States will be kept by CBP for a period of five years in an active status. After the first six months, the PNR will be “depersonalized,” with names, contact information, and other PII masked in the record.