Skip to content
News · Electronic Frontier Foundation EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

DHS Inspector General Finds That TSA is Not Properly Safeguarding Passenger Facial Recognition Data

EFF legal intern Gabrielle Ladun was the principal author of this post.

Full text

EFF legal intern Gabrielle Ladun was the principal author of this post. The Department of Homeland Security Office of Inspector General (DHS OIG) has published a summary of findings from its audit of the Transportation Security Administration’s (TSA) facial recognition technology. While the detailed findings are classified, the summary states that the OIG’s audit uncovered a “significant weakness” in the technology’s ability to protect the privacy of passenger data. This has massive privacy implications for the millions of passengers who travel and don’t opt out of the TSA’s biometric surveillance technology verification process. TSA uses facial comparison technology for identity verification of airline passengers. A camera takes a photo of passengers to verify that their provided identification matches their live photo. Although TSA states that it is “committed to protecting traveler privacy,” the audit highlights that this has not been the case. The OIG found that TSA’s Credential Au

How it connects

C-61/22 RL v Landeshauptstadt Wiesbaden The Court of Justice of the European Union (Grand Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden in proceedings between RL and the… CJEU ·Grand Chamber Mar 21, 2024 Integrity and Confidentiality Principle Biometric Data Types of Special Categories of Personal Data
€2.6M Croatian Gambling Operator The DPA initiated an ex officio investigation against a gambling operator (controller) regarding the identification and registration of players (data subjects) visiting its… Croatia ·AZOP ·Art. 4, 5, 6 +4 Oct 11, 2026 Biometric Data Personal Data Consent
C-57/23 JH v Policejní prezidium HvJ EU 20 november 2025, C-57/23, ECLI:EU:C:2025:905, (JH v Policejní prezidium). CJEU Nov 20, 2025 Types of Special Categories of Personal Data Genetic Data Criminal Data
Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024 Biometric Data Storage Limitation Identification