TomTom ONE 130. Buy Now $149.95
August 10, 2007 10:15 AM PDT
Feds consider lowering passenger data requirements
Last modified: August 10, 2007 1:22 PM PDT
- Related Stories
-
Work bill would create new ID database
May 21, 2007 -
Feds: Homeland Security project didn't protect privacy
December 22, 2006 -
Tens of thousands mistakenly matched to terrorist watch lists
December 6, 2005 -
Feds order airlines to divulge passenger details
September 21, 2004 -
Senate scrutinizes air travel database
March 13, 2003 - Related Blogs
-
Travelers gripe about no-fly errors
September 30, 2005 -
Canada may stop using U.S. passenger profiling lists
May 4, 2007 -
Fake boarding pass site creator goes free
November 28, 2006
Under a new proposal for a controversial program known as Secure Flight (click for PDF), the Transportation Security Administration would assume the duty of checking passengers against terrorist watch list databases, which is currently done by U.S. air carriers. In a nod to earlier privacy concerns, it proposes scaling back the amount of data that airlines would be obligated to submit about their passengers.
Unlike earlier plans, "it's not going to rely on collecting commercial data; it's not going to assign a risk score to passengers; it's not going to try to predict behavior," Homeland Security Secretary Michael Chertoff said at a press conference on Thursday. "It's only designed to collect a minimum amount of personal identifying information so that we can do an effective job of matching the traveler to a person whose name and identity is on a watch list."
The plans aren't final. They are set to be open for public comment for 60 days after their publication in the Federal Register. A TSA spokeswoman said the agency expects to begin implementing the new rules late next year.
Secure Flight, which was born in 2004, has already been put on hold amid privacy "mishaps" flagged by government auditors and others. As a result, Congress decreed that Homeland Security can't proceed with a watch list-checking program until it shows that it's sufficiently privacy-protective and functional.
The latest approach is intended to improve security amid what Homeland Security says are inconsistent watch list-checking practices by airlines. It's also designed to give federal agents more time to resolve the "false positive" matches that have notoriously arisen under the current system, leading to delays for innocent travelers.
For international flights, some changes will be coming sooner. In a separate rule issued Thursday, Homeland Security said Customs and Border Protection will soon begin requiring airlines to submit, no later than 30 minutes before takeoff, a passenger's full name, date of birth, gender, passport information, citizenship information, and flight and itinerary information.
Much of that data doesn't currently get sent for checks against watch lists until after the flight has already taken off, which Homeland Security says is "too late" to do effective screening.
In its 139-page proposed rules for Secure Flight, Homeland Security says it would require passengers only to submit their full names--as they appear on their identification documents--to airlines when making flight reservations.
Airlines would also be required to request other information, such as the passenger's date of birth and gender, but giving it would be voluntary. Homeland Security warned, however, that withholding those extra details could prompt extra screening at the airport or prevent early check-in, as it may be more difficult for federal agents to distinguish innocent travelers from terrorist watch list designees.
Passengers would also be asked to voluntarily submit to their airline two somewhat mysterious new identification numbers developed by TSA. Those, too, are intended to make the screening process easier.
One is called a "redress number," which TSA plans to assign to passengers who have reported through its redress process being "incorrectly" delayed in their travels. The other is a "known traveler" number, which would be given to travelers who have already undergone what Homeland Security calls a "terrorist security threat assessment" and been deemed benign.
It's unclear how that process would unfold, but the idea resembles an existing program called Registered Traveler, in which passengers can pay a fee, submit biometric and biographic information and, if they pass muster, receive a special card designed to allow speedier passage through security checkpoints.
See more CNET content tagged:
Transportation Security Administration,
homeland security,
airline,
passenger,
Homeland Security Secretary
What happens if the computer systems go down? Does everyone in the country have to sit and wait?
And how can TSA provide extra training for "access controls" and "audit logging" tasks? Those jobs require the actions of fully qualified IT security personal, or it means nothing.
All in all I think this is a long way from being settled.