X

Feds order airlines to divulge passenger details

Requirement is part of a trial run of a computer system intended to spot terrorists before they can board a plane.

Declan McCullagh Former Senior Writer
Declan McCullagh is the chief political correspondent for CNET. You can e-mail him or follow him on Twitter as declanm. Declan previously was a reporter for Time and the Washington bureau chief for Wired and wrote the Taking Liberties section and Other People's Money column for CBS News' Web site.
Declan McCullagh
2 min read
The U.S. Department of Homeland Security said Tuesday that it will order airlines to hand over the complete records of all passengers who traveled on a domestic flight in the month of June.

In an "emergency" notice, the department's Transportation Security Administration said that the requirement is necessary to test a controversial computer "prescreening" system that attempts to identify terrorists before passengers are permitted to board their flight. The system is called Secure Flight.

The information that airlines will be required to divulge by Oct. 29 includes, at a minimum, the passenger's name, reservation date, travel agent, itinerary information, form of payment, flight number and seating information.

TSA said that it will use those passenger records in two ways. First, it will verify that Secure Flight is able to match information on air travelers with records stored in government databases. Second, it will combine the passenger records with data purchased from unspecified "commercial data aggregators who provide services to the banking, home mortgage and credit industries" to see how much it may help the data-mining process.

Secure Flight is the renamed successor to the embattled Computer Assisted Passenger Prescreening System (CAPPS), which had drawn fire from some members of Congress who worried about the privacy implications of performing intensive background checks on Americans who chose to travel by air. Homeland Security Secretary Tom Ridge said in July that CAPPS would be dismantled for that reason.

The department hopes that Tuesday's announcement, which promises that the data will be stored safely and securely, will quell some of the privacy worries. In a separate notice, TSA privacy official Lisa Dean wrote that the agency "believes it has taken action to mitigate any privacy risk by designing its next-generation passenger prescreening program to accommodate concerns expressed by privacy advocates, foreign counterparts and others."

Marcia Hofmann, staff counsel of the Electronic Privacy Information Center, said that it was "unclear" whether TSA had the legal authority to demand the airlines' records. Hofmann also questioned whether it was wise to expand reliance on "watch lists" or "no fly lists," which can be problematic for innocent people whose names resemble those on the list.

Airlines will have a month to comment on the proposal before it takes effect. They will be required to divulge passenger records on optical media in an XML or other structure data format if available.