Regulatory Watch  /  United States (federal)  /  Enforcement
Low impactEnforcementPublished

DHS OIG audit finds TSA failed to safeguard passenger facial recognition data

The DHS Office of Inspector General reported a significant weakness in TSA's facial recognition system, noting that the vendor could access and extract sensitive driver’s license and passport images without TSA’s knowledge. The audit found TSA lacked clear policies, did not track data extraction, could not verify proper deletion, and failed to notify passengers of stored biometric data. TSA concurred with the OIG’s recommendations, with one remaining unresolved.

Why it matters: The audit highlights serious privacy and security gaps in the TSA’s biometric surveillance program, underscoring the need for stronger oversight and data handling controls.

Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.

Sources
DHS Inspector General Finds That TSA is Not Properly Safeguarding Passenger Facial Recognition Data
EFF updates · primary source · Oct 14, 2026
Details
JurisdictionUnited States (federal)
RegulatorDepartment of Homeland Security Office of Inspector General (DHS OIG)
StatusPublished
PublishedOctober 14, 2026
Effectivenot stated
OrganisationsTransportation Security Administration (TSA)
Topicsbiometrics, privacy, security
Databiometric, personal