The **DHS OIG** has released a summary of its audit into the **TSA's** facial recognition technology, revealing a major flaw in its ability to protect passenger privacy. While the detailed report remains classified, the summary points to a "significant weakness" that could compromise the sensitive information of travelers who use, or are subjected to, the **TSA's** biometric verification process. **TSA** employs facial comparison technology to verify passenger identities, where a camera captures a live photo to match against provided identification. Despite the **TSA's** public commitment to "protecting traveler privacy," the audit suggests this commitment has not been adequately upheld. ### Vendor Access and Data Exposure The **OIG's** investigation found that the vendor for **TSA's Credential Authentication Technology 2 (CAT-2)** was able to "access and extract sensitive passenger information, including driver’s license and passport images, during system troubleshooting and enhancements, without **TSA’s** knowledge." Furthermore, the **OIG** criticized the agency for its lax oversight: > **TSA** lacked clear policies, did not track when this data was extracted, could not verify that extracted information was properly deleted, and did not notify passengers when their biometric and biographic information may have been stored. As a result, although passenger information was generally protected during routine operations, weaknesses in vendor oversight created a risk that sensitive personal information could be retained or exposed. ### Recommendations and Ongoing Concerns The **OIG** issued one finding and three recommendations aimed at strengthening controls, improving oversight, and ensuring transparency in handling passenger data. The **TSA** has concurred with all three recommendations, with two resolved and one remaining open. ### Why Facial Recognition Raises Red Flags Organizations like the **Electronic Frontier Foundation (EFF)** have long opposed government use of facial recognition technology. The **OIG's** audit reinforces these concerns by highlighting the inherent privacy risks, including unsecured data, potential unauthorized access, and the specter of data breaches. Critics argue that such systems contribute to mass surveillance and facilitate the creation of biometric records without explicit consent. Moreover, facial recognition technology is not infallible, with documented instances of misidentification leading to false arrests. ### Your Right to Opt Out Given the documented privacy weaknesses and the potential for error, travelers are reminded that they can opt out of the **TSA's** facial comparison process. The **TSA's** own website confirms that passengers can decline to have their photo taken for facial comparison "without any delay, disruption, or recourse." The **EFF** continues to advocate against this governmental mass surveillance system, emphasizing the importance of informed consent and robust data protection in the face of evolving biometric technologies.