https://www.tsa.gov/travel/frequently-asked-questions/does-t...
But that's just generous reading, anyway. There are so many ambiguities that it's not really worth the trouble to attempt any rigorous analysis of it.
"In rare instances TSA will collect and temporarily retain photos and data..." How rare? Doesn't matter: then what happens?
"...data collection mode events are limited in time and place..." Damn unrelenting spacetime.
"TSA’s facial comparison technologies adhere to DHS and TSA cybersecurity requirements." Restatement of the problem.
The last I read the SORN for TSA’s facial recognition, they did commit to deleting identifiable data within 24 hours.
CBP operates their facial recognition under a different SORN, and there are many more caveats, although they also commit to deleting identifiable data within 24 hours for US citizens (only).
That was in late 2024 anyway.
If we want to be truly generous in interpreting it, the new sample would be deleted and the comparison is done against the photos they have on file from your ID/passport (although, since a foreigner can do it on their first visit to the US, it might just be based on scanning the document you provide). Of course, single-sample-per-person facial recognition is pretty limited, but it's security theater anyways.
The cat's out of the bag, anyway. They already have a perfect dataset and surveillance mechanism. But it'd be nice to stop continuing to perfect it.
Were they lying? Possibly. But this is not a matter of them trying to use weasel wording to trick you into thinking they're claiming something they're not.
Moreover, it was put forward as proof that they don't keep the data, but the source is actually called "Does TSA protect all data (e.g., photos) collected." What are they protecting if they don't have it? What would be the point of even doing this if they don't collect it?
But leave that aside and let's talk about your experience. Did it say the data would be deleted after 24 hours or did it say it would be deleted after use? What is use? Use could be we're operating a giant biometric database and we intend to keep doing it until the asteroid, and why wouldn't it be that?
I'm not attempting to defend the TSA; I think they're reprehensible. I wish merely to provide new facts into the discussion.
Yes, they could be lying. That would be illegal.
The entire scheme has a very high abuse potential. Equipment and personnel set up at major ports and their presence normalized. Turnkey authoritarianism at its finest.
