Hey privacy community! A few weeks back I’ve seen an article posted here or in some other tech community about TSA rolling out biometric ID process in some US airports, that involved taking a face scan.

I had an international flight planned and I wouldn’t want to go through biometric ID, but I was anxious of potential delay and having to explain myself to TSA agents. I also convinced my wife to opt out, which could potentially double the delay.

So for the folks who may have the same concerns, I’d like to share my experience.

I went on my flight a few days back from Newark International Airport (EWR). We went through security check in new Terminal A. At the beginning of the security line there were a few clearly visible posters about biometric ID with opt out information. To opt out you just need to tell TSA agent that you don’t want your photo to be taken. The poster also says that you will not lose your place in line if you opt out. Same posters are on each agent desk.

The scanning machine is on every agent’s desk, next to the opt out posters. It has a screen, about 8", with something that looks like a set of stereo lenses on top of it. The screen shows the live feed of the person in front of it during scanning process, with a template of a face that helps to properly position it. The scanning process seems to be very quick.

Now, for the opt out - it is indeed as easy and seamless as they claim. I asked the agent to not take my picture, he just said OK and asked me for my passport. The scanning machine didn’t turn on. He scanned my passport and gave it back, and I was done, no questions asked.

Actually, I noticed that people who had their faces scanned also had to hand passports over. So they had to spend more time with the agent than I. I assume because it was their first time through this biometric collection and next time they just scan their face again and that’s it.

And while I was pleased how easy it was for me and my family to opt out of this, in my opinion, completely unnecessary privacy invasion, I have not observed any other person (out of maybe 100 who passed before me) who did the same. Unfortunately, we know here how easily and thoughtless people give away yet another piece of their personal data. In this case, the data that can be used next time to ID people via video surveillance without any consent.

  • orca@orcas.enjoying.yachts
    link
    fedilink
    arrow-up
    29
    arrow-down
    1
    ·
    edit-2
    11 hours ago

    Wow, this seems like they’re trying to take advantage of an opportunity to slip something irrelevant in to the process. Like someone was trying to think of a way to get facial recognition data and the TSA lines were the “perfect” place.

    • Dark Arc@social.packetloss.gg
      link
      fedilink
      English
      arrow-up
      9
      ·
      edit-2
      11 hours ago

      I agree honestly. I’ve gone through the exact process op has described several times now and flew even more before the process started.

      I think the lines are worse than they used to be. I have not seen the scan improve anything. The only time I’ve seen things move slower for me is recently the agent hadn’t done an opt out in a while and had to remember how to do it. The TSA precheck line I was in did not have opt out signs posted. I just politely asked anyways (and they did comply).

      I had a similar situation happen with customs where the guy was confused by my request and hadn’t done one it the old way in a while but honored it without argument.

      • orca@orcas.enjoying.yachts
        link
        fedilink
        arrow-up
        4
        ·
        edit-2
        11 hours ago

        I think the airport near me is getting them soon, if not already (it’s been a little while since I last flew). This seems like a handful of companies saw an opportunity to sell the concept of security to people that are naive, and they went along with it. Typical government tech contract type stuff that in this case they use as an additional data aggregation vector. It explains why there was no push or response when OP opted out. When someone knows that an action or inquiry can be perceived as questionable or invasive, they want to end the exchange quickly like it never happened.