Category: <span>TSA</span>

I finally got a response from Melanie Cunningham (Executive Assistant, Transportation Security Administration) regarding the issue of TSA violating their posted facial recognition policies. Recall that they required me to have my face scanned because I did not opt out before handing them the ID.

The responses were a bit contradictory. First she said that the policy had changed and that it used to require travelers to opt out before handing the ID over. She sent me an image of a sign that was supposedly posted. However I had never seen that sign at any airport before. She said it was only BDL, which makes no sense, but also it’s not a sign I had seen at BDL. She said though that the policy had changed and now travelers can opt out in any order. But the next time I went through BDL I saw they had posted the signs for what she claimed was the old policy that was no longer in effect. It seems like that there isn’t any real accountability or consistent rational policy over there, allowing employees to kind of do what they want.

Second, recall that I complained about the supervisor, Dominick Amari (employee #33612), taking photos of my data on what I suspected was a personal device. This is certainly covered to various degrees by numerous policies as well as state and federal laws, so it’s a serious matter if true. Instead of investigating it herself, she asked me if I had asked him what he was doing. These are not serious people running a serious security outfit. They should not be trusted with our data, and this is why I opt out of facial recognition and body scans.

TSA

Last year, I had a problem with TSA at Bradley Airport (BDL), in Connecticut. I filed a complaint and reached out multiple times, and have since confirmed that the employees involved broke TSA policy and possibly laws. However, TSA leadership seems to be burying the issue. They haven’t even given me a boilerplate “we take your privacy seriously and we’re handling it” sort of thing. Therefore, I will write about it here.

First, some background: TSA policy allows passengers to opt out of facial recognition.

There was no TSA line when we arrived, so I walked directly up to the kiosk manned by Mr. Hoague (employee #95999). He asked me to put my ID card in his scanner device. I already had my passport card in hand, so I promptly followed this instruction. He then asked me to allow my photo to be taken by the facial recognition system, and I declined. He informed me that I was not allowed to opt out, because I had already scanned my ID card. He further explained that this policy regarding the order of events was printed on various small placards when entering the TSA checkpoint. I travel somewhat routinely, often out of BDL, and I have never encountered this nuanced interpretation of my right to opt out of facial recognition. I asked to speak to Mr. Hougue’s supervisor, Dominick Amari (employee #33612). Mr. Amari reiterated the policy stated by Mr. Hougue, and they eventually forced me to submit to the facial recognition system.

I have since had the opportunity to read the signs in more detail. They definitely do not say what these men were claiming. Employees of the TSA have an obligation to ensure that travelers are able to make informed decisions regarding their personal information. Many travelers have well-founded concerns about potential misuse of facial recognition data and the impossibility of changing one’s face after being compromised. Even the Connecticut State Police Officer working at the checkpoint told me that the alleged policy offended him as well. I should always be the arbiter of how my information is collected and used. It is particularly upsetting because ultimately employees turned out to be incorrect.

Additionally, it appeared that Mr. Amari took photos with his phone of the computer screen that presumably contained my personal information. If it was a personal phone, then that would be a major infringement of my privacy expectations and probably TSA policies (and possibly state and federal law). Either way, this raises concerns about how my data is to be stored and protected once it is outside of the normal confines of the normal ID verification system. Mr. Amari had no valid need to collect and store anything more than is required for the ID screening process. I do not consent to any use of my ID, photos, or personal information for any purposes aside from verifying my identity and I requested that any such data be deleted immediately and disciplinary actions be taken.

I have received no resolution from TSA. They told me at one point that the matter was referred to the staff at the airport. Obviously I do not trust them, and with them not responding it seems my distrust is well-founded.

TSA