The European Parliament has approved a new deal that allows authorities in the United States to hold on to airline passengers' details for 15 years.
The information is mainly used for counter-terrorism purposes.
Details about race or religion can only be used in exceptional circumstances.
However, opponents argue the measures do not meet European data protection standards.
A passenger name record (PNR) is created every time an individual takes a commercial flight, and includes details such as addresses and credit card details.
Airlines flying to or from the US are obliged to pass on the PNR information to the US Department of Homeland Security, where it is used in counter-terrorism investigations or to combat serious transnational crime.
Under the terms of the deal approved by MEPs, PNR details can be kept for 15 years, after which the data is "anonymised".
MEPS approved the deal with 409 voting in favour, 226 voting against.
Many of those who voted against it said they had serious misgivings over the 15-year limit, and claimed that the safeguards in the agreement are not up to EU standards.
