Navigating TSA Facial Recognition: Opt-Out Rights and Privacy Concerns
Air travel in the United States is undergoing a significant technological shift. If you have flown recently, you might have noticed a change at the security checkpoint. Instead of a Transportation Security Administration (TSA) officer simply looking at your driver’s license and glancing at your face, you may have been asked to insert your ID into a machine and look into a camera. This is the new age of biometric screening. While efficient for some, it raises valid questions about privacy and civil liberties.
What Are These New Scanners?
The machines you see at checkpoints are known as Credential Authentication Technology (CAT) units, specifically the second-generation models called CAT-2. These units are equipped with a tablet-sized camera and a specialized ID scanner.
The process is automated. You insert your government-issued identification into the scanner. The machine analyzes the ID to ensure it is authentic and not expired. Simultaneously, the camera captures a live photo of your face. The system then uses facial recognition algorithms to compare your live image with the photo on your ID. If they match, the officer waves you through. In many cases, this technology eliminates the need to scan a boarding pass because the system is connected to the Secure Flight database, confirming your flight details instantly based on your ID.
Your Right to Opt Out
This is the most critical piece of information for travelers concerned about privacy: participation is currently voluntary.
Despite how the process is presented at the airport, you are not required to submit to a facial scan. TSA signage regarding your rights can sometimes be small or placed in obscure locations, leading many travelers to believe the photo is mandatory.
If you wish to opt out, follow these steps:
- Inform the Officer: As you approach the podium, clearly state to the TSA officer, “I do not want my photo taken,” or “I am opting out of biometrics.”
- Expect Manual Processing: The officer will then perform a standard manual identity verification. This involves them physically inspecting your ID and visually comparing it to your face.
- No Penalties: You cannot be denied entry to the sterile area or lose your place in line for opting out, though the manual check may take a few seconds longer.
While TSA spokespeople have reiterated that the program is voluntary, reports from travelers suggest that some individual officers may express annoyance or confusion when a passenger opts out. However, agency policy explicitly protects your right to refuse the photo.
Privacy Concerns and Data Retention
The rollout of CAT-2 units has sparked a debate between security efficiency and personal privacy. Several U.S. Senators, including Jeff Merkley and John Kennedy, have introduced legislation attempting to halt or strictly regulate the expansion of this technology.
The primary concerns revolve around three areas:
- Data Storage: Travelers worry about where their biometric data goes. The TSA currently states that for standard operations, the photos are not saved. The system overwrites the image as soon as the passenger is cleared. However, privacy advocates worry about “scope creep,” where data retention policies could change in the future without robust public oversight.
- Surveillance Infrastructure: Civil liberties groups like the ACLU argue that normalizing facial recognition at airports creates a precedent for widespread government surveillance in public spaces.
- Algorithmic Bias: Historically, facial recognition software has demonstrated higher error rates when identifying people of color and women compared to white men. While the TSA claims recent testing shows statistically insignificant differences in accuracy across demographics, the fear of false rejections remains a concern for many minority travelers.
Where Is This Technology Deployed?
The TSA is deploying these units aggressively. As of late 2023 and early 2024, CAT-2 units are operational at over 80 airports nationwide. You are most likely to encounter them at major international hubs.
Common locations include:
- Hartsfield-Jackson Atlanta International Airport (ATL)
- Boston Logan International Airport (BOS)
- Denver International Airport (DEN)
- Detroit Metropolitan Wayne County Airport (DTW)
- Los Angeles International Airport (LAX)
- Miami International Airport (MIA)
- Orlando International Airport (MCO)
- Salt Lake City International Airport (SLC)
The technology is used in both standard security lanes and TSA PreCheck lanes.
Airline Biometrics vs. TSA Biometrics
It is important to distinguish between the TSA’s government screening and voluntary biometric programs run by airlines.
Programs like Delta Digital ID (available at ATL, DTW, LAX, LGA, and JFK) and United Airlines’ Touchless ID use facial recognition to let you check bags and pass through security without showing a physical ID at all. These are opt-in programs linked to your passport data or TSA PreCheck profile.
If you sign up for Delta Digital ID, for example, you are consenting to biometric matching. However, if you are in a standard TSA lane and have not signed up for a specific airline program, the general TSA opt-out rights described above still apply to you.
Mobile Driver's Licenses (mDL)
The CAT-2 units are also designed to support the next generation of identification: the mobile driver’s license. States like Arizona, Colorado, Maryland, and Georgia have rolled out digital IDs that live in your Apple Wallet or Google Wallet.
If you use an mDL, the process requires NFC technology. You tap your phone or watch against the CAT-2 reader and authorize the data share via Face ID or Touch ID on your device. In this specific scenario, a live photo is usually required to match the digital token provided by your phone, making it harder to opt out of the photo if you insist on using a digital ID instead of a physical card.
Frequently Asked Questions
Does the TSA save my photo after the scan? According to current TSA privacy impact assessments, photos taken during standard screening are not stored or transmitted to a database. They remain in the machine’s RAM only for the moments needed to verify your identity and are then overwritten. However, during limited “testing” periods, data may be collected for analysis.
Will opting out make me miss my flight? No. Opting out requires a manual ID check, which typically takes only 10 to 30 seconds longer than the digital scan. Unless you are running to the gate with only a minute to spare, the manual check will not significantly impact your schedule.
Can children opt out? Yes. The biometric scanning is generally intended for adult passengers. Children under 18 usually do not require ID for domestic travel, but if they are scanned or asked to stand for a photo, parents can decline on their behalf.
Is facial recognition more accurate than human officers? The TSA claims that the technology is more effective at catching imposters (people using fake IDs or someone else’s ID) than human officers, who can suffer from fatigue or distraction. The automation allows officers to focus on other security tasks rather than document inspection.