The 95% that was raised has to do with the risk assessment that is done on PNR. When we do targeting on an air passenger, we use two types of information: API, advanced passenger information, and PNR. API is legislated. Airlines have to provide the CBSA with API information. PNR is not. PNR information is provided by airlines when they collect it and when they get it.
On December 9th, 2013. See this statement in context.