Facial recognition at TSA: What to know before your next airport screening
The growing use of facial recognition technology at airport security checkpoints is making some travelers worry about their digital privacy.
During the screening process at Transportation Security Administration checkpoints across 84 airports nationwide, air passengers will encounter the second-generation Credential Authentication Technology (CAT), according to the agency's website. The technology is expected to roll out to over 400 federalized airports.
This biometric technology, in which a traveler's photo is taken while the officer scans their ID, is meant to streamline the process of verifying that you match your documents, flight status and vetting status. It also assesses digital IDs, if a traveler has one.
What travelers should know: Do I have to give border control my phone?
"This latest technology helps ensure that we know who is boarding flights," said TSA's Federal Security Director for Pennsylvania and Delaware Gerardo Spero in a news release last month. "Credential authentication plays an important role in passenger identity verification. It improves a TSA officer's ability to validate a traveler's photo identification while also identifying any inconsistencies associated with fraudulent travel documents."
However, there are rising concerns around the safety of biometric information storage, stemming from the lack of transparency around the database where the information is being stored.
"It's not about the integrity of your face or driver's license, it's about the database where you have no control," said India McKinney, director of federal affairs at the Electronic Frontier Foundation. There's the risk of misidentification, security breaches, plus human or technological error. The screening process also varies at different airports and even terminals, putting the burden on the traveler.
"We are aware of a variety of public concerns related to the accuracy of facial recognition and other biometric technologies and take those concerns seriously," the agency told USA TODAY in an email statement.
Here's what travelers should know about TSA's facial recognition technology.
According to the TSA, your information is generally deleted shortly after you pass the screening process and is not used for surveillance purposes. If you opted into the TSA PreCheck Touchless Identity Solution, your information will be deleted 24 hours after your flight's scheduled departure time.
"TSA is committed to protecting passenger privacy," an agency spokesperson said. "Under normal operating conditions TSA facial recognition technology deletes traveler data and images immediately after your identity is verified."
However, the agency added that the TSA will temporarily keep photos and data "in rare instances" to test the accuracy of the biometric technology. If this is going to happen, the agency will notify passengers with signs, and it's only for a limited time. Travelers can decline without losing their place in line.
The agency said it secures all personal data and images, and adheres to DHS and TSA cybersecurity requirements.
Nevertheless, all systems, including facial recognition technology, are susceptible to being compromised. "No cyber system is 100% secure, even if the images aren't used for a long period of time," said Vahid Behzadan, assistant professor in computer science and data science at the University of New Haven.
"The fact that they're being imposed on a large group of travelers presents a vulnerability ... if an adversary manages to compromise the end points, then the adversary has access to all the facial images and details, assuming the IDs are also scanned."
Yes, you can opt out of facial recognition technology and receive an alternative ID credential check from the officer instead. "There is no issue and no delay with a traveler exercising their rights to not participate in the automated biometrics matching technology," TSA states on its website.
This article originally appeared on USA TODAY: TSA facial recognition: What happens to your data after screening?
Hashtags
Try Our AI Features
Explore what Daily8 AI can do for you:
Comments
No comments yet...
Related Articles
Yahoo
38 minutes ago
- Yahoo
United Airlines Turns Off Starlink Access Amid Interference Concerns
PCMag editors select and review products independently. If you buy through affiliate links, we may earn commissions, which help support our testing. United Airlines' plans to retrofit its entire regional fleet with Starlink connectivity have hit a roadblock, at least temporarily. United first started rolling out Starlink access using a free-with-ads model in May, becoming one of a select club—including Hawaiian Airlines and the boutique air carrier JSX—to offer flyers access to SpaceX's satellite broadband service. Its speed and performance proved a hit with PCMag when it debuted, and United announced plans to install Starlink in its entire two-cabin regional fleet by the end of 2025. However, Starlink has been turned off on almost two dozen Embraer E175 regional jets, according to air industry publication The Points Guy. The issue stems from static interference between the antennas that pilots use to communicate with air traffic controllers and Starlink's antennas. United confirmed the reports in a statement, saying that this type of radio interference is 'fairly common with any new airline Wi-Fi provider' and that the issues are not a flight safety risk. 'We expect the service to be back up and running on these aircraft soon,' a spokesperson said. According to The Points Guy, roughly a third of the impacted planes have already had a fix applied. United doesn't expect to cancel any flights as a result of the issue and will instead wait until each aircraft's scheduled maintenance to fix the interference issue. Though Starlink may be off the table for many domestic fliers, at least in the short term, United has introduced new ways for travelers to distract themselves in recent weeks. The Chicago-based carrier announced earlier this week that it's bringing the streaming-audio service Spotify to the on-demand entertainment displays of over 680 of its aircraft, offering 'specially curated versions of Spotify's most popular playlists.' The new Spotify integration will replace the 'Audio' option on the home-screen menu of those displays.
Fox News
an hour ago
- Fox News
Woman rips into 'stupid showers at hotels' and those responsible for designing them
A thread on Reddit has gone viral as a woman is criticizing the designers, installers and others responsible for "the stupid showers at hotels," saying she cannot step into a shower today while traveling and not "be blasted by cold water that gets my head wet." Over 6,000 people reacted to the post to date and nearly 1,000 comments have come in, with commenters sharing their own frustrations about the hotel travel experience. "Who designs the stupid showers at hotels?" the woman wrote in her post on social media, addressing her note to "male hotel room designers." She wrote, "I'm a woman. I don't wash my hair every day. Please give me a way to turn on the shower without having to get in and be blasted by cold water that gets my head wet." She also said, "I miss shower curtains, and now we have glass walls that don't move." She closed her post with, "Signed, A Traveler with Loyalty Status." In an edit, she later added, "Wow, the number of times I have been called bleeping feminist (or worse) on this post is kinda s-----. I have no problem being a feminist, thank you." The woman then offered more context. "The start of this was a conversation I had with a male colleague who has opened eight hotels (under different flags), and he had never considered that not all people wash their hair every day," she wrote. "We also talked about rain showerheads," she wrote, "and [the] lack of other amenities geared toward women travelers." People who responded to the post shared their own ideas for improving the hotel room experience. "I want a door on my shower." "Please make sure there are hooks in the bathroom," wrote one person. For more Lifestyle articles, visit Wrote another person, "I want a shower that is fully enclosed so that I'm not cold and there isn't water all over the floor after the shower! I also want counter space to set [up] my toiletries! Is that so hard?" Said another commenter, "Expensive hotel doesn't mean great shower design." Another person wrote, "I want a door on my shower." She added, "In the long run, I am certain the money they saved [by] not putting a door on the shower is wasted in energy costs as I have to turn up the hot water during the shower." Said another person, "Do not make me climb into the shower to turn the water on. Have the faucet on the same side as entry so we can reach in."
Forbes
an hour ago
- Forbes
Delete Every App On Your Smartphone That's On This List
All these apps are dangerous You probably have at least 100 apps on your phone — likely more. And there's plenty of choice, almost 2 million apps on Apple's App Store and nearer 3 million on Google's Play Store. You're urged only to install apps from official stores, but sometimes even that doesn't keep you safe. So it is with a new list of apps you must delete right now. This list comes courtesy of Cyble, whose researchers discovered a raft of apps had tricked their way onto Play Store despite mimicking the names and icons of legitimate digital wallets. Once installed and opened, the apps open a phishing website or an in-app WebView, requesting the mnemonic phrases that can be used to empty the wallet. Cyble found more than 20 apps, 'targeting crypto wallet users' by impersonating 'popular wallets such as SushiSwap, PancakeSwap, Hyperliquid, and Raydium,' and tricking users into dangerous Play Store installs 'by using 'compromised or repurposed developer accounts.' The apps named after those targeted wallets are listed below. Fake wallets apps. There were multiple apps per targeted wallet, which is why there are only 9 app names to look for. All seem to come from different developers, but 'exhibit consistent patterns, such as embedding Command and Control (C&C) URLs within their privacy policies and using similar package names and descriptions.' Those developer accounts once distributed legitimate apps, but have been compromised for this malicious campaign. Cyble warns these apps 'employ phishing techniques to steal users' mnemonic phrases, which are then used to access real wallets and drain cryptocurrency funds.' The apps were not discovered all at once, but over recent weeks. And as they're reported they're being removed from Play Store. Check the list above and delete any on your phone. And also ensure that Google's Play Protect is always enabled on your phone. Fake wallets apps Cyble says 'these apps have been progressively discovered over recent weeks, reflecting an ongoing and active campaign,' and all were reported to Google. Most were already removed prior to publication, while the rest 'have been reported for takedown.' 'What makes this campaign particularly dangerous,' the researchers say, 'is the use of seemingly legitimate applications… combined with a large-scale phishing infrastructure linked to over 50 domains. This not only extends the campaign's reach but also lowers the likelihood of immediate detection by traditional defenses.' There's no safety net with digital wallets. Losses wont be recovered. Do not install apps unless you know they're provided by the entity behind the wallet itself and you've linked to the app from the actual website. If you have any of these apps, delete them.
