A Federal Privacy Board Is Reviewing DHS’ Airport Facial Recognition Programs

4kclips/Shutterstock.com

An agency shared new details around its recent observations of one TSA biometrics pilot—and what it aims to assess in a comprehensive report it’s generating over the course of the next year.

A government bipartisan privacy oversight board recently toured Transportation Security Administration’s facial recognition pilot program in Las Vegas’ McCarran International Airport as part of a comprehensive review of the Homeland Security Department’s expanding biometrics projects. 

The Privacy and Civil Liberties Oversight Board, which grew out of a recommendation from the 9/11 Commission, initiated a deep-dive project on facial recognition in aviation security earlier this year, when insiders recognized how TSA and Customs and Border Protection were ramping up the introduction of biometric and facial recognition technology at various points throughout passengers’ airport experiences. On top of the pilot at McCarran, the board is also looking into other facial recognition deployments across TSA and CBP, including the biometric entry and exit programs running at various airports for international departures. 

Every project the agency is looking into is part of the Homeland Security Department’s effort to eventually use biometrics to verify nearly all departing commercial air travelers over the course of the next few years. 

“Each deployment raises different issues, different operational considerations, different potential privacy concerns,” Adam Klein, the board’s chairman, told Nextgov. “It’s hard to tell at this point what is the most consequential aspect of this, because these technologies are so new and because the agencies are feeling their ways through this as well.”

The board’s ultimate mission is to help the government balance preventing terrorism with protecting public privacy. At its inception, it was set up to serve as a counterbalance to the other recommendations the 9/11 Commission suggested following the 2001 terrorist attacks, including creating the director of national intelligence, the national counterterrorism center, and increased information sharing among intelligence agencies and between intelligence and law enforcement. 

“[They] thought that increased power calls for increased oversight,” Klein said. 

In 2007, Congress reestablished the board as a bipartisan, statutory agency within the executive branch. To date, its five members must be appointed by the president and confirmed by the Senate. As the present board works to develop a detailed review over the course of the next year, Klein said it ultimately aims to assess how biometric technology is being leveraged across America to verify passengers’ identities through each phase of their air travel journeys.

“Facial recognition is popping up, so to speak, throughout the aviation process at different airports around the country, but there’s also increasing public awareness and a lot of momentum within [Homeland Security] to move in this direction,” Klein said. “And given the important questions surrounding it, and given also the importance of aviation security as a mission, we thought this would be an appropriate place for us to get involved and take a look at it.” 

The entire report is set to be published in 2020. In it, Klein said the board will evaluate things like how each use of the technology compares, whether systems used and data stored are secure, what’s planned with each project and what unplanned uses may pop up, whether mitigation features are necessary to put in place. Officials also plan to determine the ultimate best-case and worst-case implications of the evolving technology. He said it’s critical to ensure that the implementations all fully accord with public expectations, relevant statutes and Homeland Security’s own statements about how it will leverage biometrics going forward and as technology evolves. 

“As this develops, its nature will change—and that’s what we’ll want to be tracking,” Klein said.

The board will also engage with experts and stakeholders from nongovernmental organizations, academia, advocacy groups and the private sector that have also looked into these issues and either supported or raised concerns around the tech’s usage. 

“So there’s a range of possibilities we try to think through before forming a judgment about things and before making recommendations,” he said.

The project that the board observed at McCarran Airport was conducted in the TSA PreCheck lane in Terminal 3. The pilot ran for about a month and concluded last week, shortly after the board’s trip. During the on-site visit to McCarran, PCLOB participated in a confidential briefing where TSA officials answered their direct questions about the specific pilot, observed how passengers were interacting with the technology and could also take part in the program itself. In this particular test, TSA did not store photos of passengers but instead compared their physical travel documents to a photo taken of travelers’ faces. 

Klein went through the McCarran pilot process himself. He said he presented his license at a TSA checkpoint where he’d usually do so with a human officer, but instead, a machine scanned the ID, checked for the presence or absence of various features, then compared the image of his face on the ID to the image of his face that was photographed.

“So essentially, it is doing the exact same thing that the eyes and brain of a human TSA officer would do, but using a facial recognition algorithm instead of our innate human pattern recognition and comparison capabilities,” Klein said. “And it did successfully match my face to my ID, although that’s obviously a very low sample size—so we shouldn’t draw any conclusions from that.” 

He was only at the airport for several hours, so he couldn’t offer much detail into the public’s overall reception. However, Klein did share TSA’s perception of people’s reactions. 

“They said that there was a fair amount of enthusiasm but that many people are too busy and innately suspicious of anything that will distract them from their travel,” he said.

TSA Spokeswoman Lorie Dankers, who also saw the pilot in Vegas firsthand, told Nextgov Wednesday that it’s important to note that travelers had to opt-in to participate—as opposed to opting out, which is often the case. 

“TSA had hoped to get 150 travelers per day to opt-in for purposes of data collection and that was usually achieved by late morning daily due to the curiosity and interest of the traveling public,” Dankers said.

Klein also applauded the agency’s efforts to communicate all the details of the pilot and what specifically was being tested through signage and handouts, with insights into what exactly would be done with the data, which he said was imperative to share. 

TSA’s Dankers said TSA is not independently running any other biometric-focused tests on its own at this time, but the agency is collaborating on a pilot with CBP and Delta Airlines at Atlanta’s Hartsfield Airport. Only international outbound passengers are participating in that biometrics program, which leverages CBP technology—not TSA’s. 

In the coming weeks, the agency will develop learnings around the program at McCarran.

“Because the data is still being analyzed, there are no outcomes to share at this point,” Dankers said.

As a “temporary steward of [PCLOB’s] institution,” Klein said his ultimate hope is to create publications and work that are respected for being objective, fact-based and for being thoughtful about the tradeoff between security and privacy. He added that Homeland Security has supported PCLOB in their efforts around the biometric pilots so far and that, he believes, the agency has been appropriately conscious of public interest and concerns as they roll out the new technology. 

“I think they are aware that people are going to ask questions and hopefully they recognize that our board is going to conduct a fact-based analysis and gather all relevant information before we form any conclusions,” he said. “So we are approaching this with an open mind and gathering all the facts first.”

X
This website uses cookies to enhance user experience and to analyze performance and traffic on our website. We also share information about your use of our site with our social media, advertising and analytics partners. Learn More / Do Not Sell My Personal Information
Accept Cookies
X
Cookie Preferences Cookie List

Do Not Sell My Personal Information

When you visit our website, we store cookies on your browser to collect information. The information collected might relate to you, your preferences or your device, and is mostly used to make the site work as you expect it to and to provide a more personalized web experience. However, you can choose not to allow certain types of cookies, which may impact your experience of the site and the services we are able to offer. Click on the different category headings to find out more and change our default settings according to your preference. You cannot opt-out of our First Party Strictly Necessary Cookies as they are deployed in order to ensure the proper functioning of our website (such as prompting the cookie banner and remembering your settings, to log into your account, to redirect you when you log out, etc.). For more information about the First and Third Party Cookies used please follow this link.

Allow All Cookies

Manage Consent Preferences

Strictly Necessary Cookies - Always Active

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data, Targeting & Social Media Cookies

Under the California Consumer Privacy Act, you have the right to opt-out of the sale of your personal information to third parties. These cookies collect information for analytics and to personalize your experience with targeted ads. You may exercise your right to opt out of the sale of personal information by using this toggle switch. If you opt out we will not be able to offer you personalised ads and will not hand over your personal information to any third parties. Additionally, you may contact our legal department for further clarification about your rights as a California consumer by using this Exercise My Rights link

If you have enabled privacy controls on your browser (such as a plugin), we have to take that as a valid request to opt-out. Therefore we would not be able to track your activity through the web. This may affect our ability to personalize ads according to your preferences.

Targeting cookies may be set through our site by our advertising partners. They may be used by those companies to build a profile of your interests and show you relevant adverts on other sites. They do not store directly personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will experience less targeted advertising.

Social media cookies are set by a range of social media services that we have added to the site to enable you to share our content with your friends and networks. They are capable of tracking your browser across other sites and building up a profile of your interests. This may impact the content and messages you see on other websites you visit. If you do not allow these cookies you may not be able to use or see these sharing tools.

If you want to opt out of all of our lead reports and lists, please submit a privacy request at our Do Not Sell page.

Save Settings
Cookie Preferences Cookie List

Cookie List

A cookie is a small piece of data (text file) that a website – when visited by a user – asks your browser to store on your device in order to remember information about you, such as your language preference or login information. Those cookies are set by us and called first-party cookies. We also use third-party cookies – which are cookies from a domain different than the domain of the website you are visiting – for our advertising and marketing efforts. More specifically, we use cookies and other tracking technologies for the following purposes:

Strictly Necessary Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Functional Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Performance Cookies

We do not allow you to opt-out of our certain cookies, as they are necessary to ensure the proper functioning of our website (such as prompting our cookie banner and remembering your privacy choices) and/or to monitor site performance. These cookies are not used in a way that constitutes a “sale” of your data under the CCPA. You can set your browser to block or alert you about these cookies, but some parts of the site will not work as intended if you do so. You can usually find these settings in the Options or Preferences menu of your browser. Visit www.allaboutcookies.org to learn more.

Sale of Personal Data

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Social Media Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.

Targeting Cookies

We also use cookies to personalize your experience on our websites, including by determining the most relevant content and advertisements to show you, and to monitor site traffic and performance, so that we may improve our websites and your experience. You may opt out of our use of such cookies (and the associated “sale” of your Personal Information) by using this toggle switch. You will still see some advertising, regardless of your selection. Because we do not track you across different devices, browsers and GEMG properties, your selection will take effect only on this browser, this device and this website.