Published Date : 7/30/2025Â
While industry stakeholders push for the widespread adoption of biometrics in global travel, digital rights groups are raising concerns about the normalization of facial recognition. The Algorithmic Justice League (AJL) has released a report titled 'Comply to Fly?' which delves into the issues surrounding TSA's facial recognition program.
A release from the AJL states that while the TSA initially described its facial recognition program as a pilot, it has expanded to over 250 domestic airports and is set to reach 430 airports in the coming years. The AJL accuses the TSA of 'scope creep' and highlights that their report aims to fill a critical gap in public knowledge about travelers' experiences with airport face scans.
The report is filled with numbers and testimonials that make a strong case for pausing the use of facial recognition at TSA checkpoints. A key finding is that many travelers surveyed across 91 U.S. airports felt that TSA officers presented facial recognition as mandatory, despite it being voluntary. The AJL raises concerns about transparency and consent, as well as the treatment of travelers by TSA officers.
In the survey conducted by AJL, 99 percent of respondents indicated that they were not informed verbally by TSA officers of the opportunity to opt out. Nearly three out of four respondents reported not receiving any notice about the use of face scans. Signage and data handling are also identified as significant issues.
The human element further complicates the experience, with travelers reporting verbal abuse, hostile body language, increased scrutiny, and other injuries to dignity and respect when attempting to opt out. Agents often shamed or ridiculed travelers verbally, adding to the negative experience.
Not mincing its recommendations, the AJL calls for a halt to the TSA's use of facial recognition to allow for public deliberation and to address the concerns raised by travelers, civil society organizations, bipartisan elected officials, and even the U.S. government’s Privacy and Civil Liberties Oversight Board (PCLOB). The AJL prioritizes freedom and privacy, informed public decision-making, and improved treatment by TSA officers.
The AJL recommends that by December 2025, TSA should implement a dedicated biometrics complaint procedure for travelers to submit new and retroactive complaints related to the use of facial recognition technology (FRT) and other experimental biometric pilots. Specific procedures should be established to respond to these complaints.
There are U.S. lawmakers who agree with the AJL’s position. The Traveler Privacy Protection Act, S. 1691, is a bipartisan bill that aims to restrict the TSA’s use of facial recognition at checkpoints and reset the default to traditional identity verification unless travelers opt in to FRT. The bill warns of the dangers of creating a nationwide biometric tracking infrastructure and the potential for misuse by government or private entities.
The legislation has garnered support from rights groups such as EPIC, ACLU, Fight for the Future, and the Project on Government Oversight. However, airlines have pushed back, arguing that the bill would undermine TSA’s security modernization efforts. The Security Industry Association and the International Biometrics + Identity Association have also responded to criticisms, arguing that the technology does not constitute or enable government surveillance and that it has an extensive governance policy.
The bill was due for markup by the Senate Committee on Commerce, Science, and Transportation but was removed from the Committee’s schedule at the last minute. Committee Chair Ted Cruz (R-Texas) stated that it was not ready to be considered.
While travelers surveyed for the AJL report felt bullied into providing biometrics, many others prioritize a smoother travel experience over data protection. According to the Getronics 2025 Travel Trust Barometer, 53 percent of British passengers place a smooth journey as their top priority for air travel, while only 36 percent prioritize safeguarding personal data.
The report indicates that while biometric acceptance is high, with 66 percent of respondents comfortable using biometrics on their phones and 76 percent for facial recognition, almost 12 million people in the UK are uncomfortable with the increasing use of facial recognition. Just over half of passengers (55 percent) feel in control of their personal data when booking travel.
Rob Nidschelm, Global Head of Operational Security at Getronics, notes that airports are now complex digital ecosystems. As travel becomes increasingly paperless and biometric-based, the cybersecurity attack surface is expanding rapidly. Trust is fragile, and there is a clear opportunity to strengthen it through transparency, choice, and digital literacy.
There is an urgent need for clearer, more accessible communication around data use. Surly TSA agents, take note.Â
Q: What is the main concern of the Algorithmic Justice League (AJL) regarding TSA's facial recognition program?
A: The AJL is concerned about the lack of transparency and consent in TSA's facial recognition program, as well as the treatment of travelers by TSA officers.
Q: What does the AJL recommend in its report 'Comply to Fly?'
A: The AJL recommends halting the TSA's use of facial recognition to allow for public deliberation and to address the concerns raised by travelers and civil society organizations.
Q: What is the Traveler Privacy Protection Act (S. 1691) and what does it aim to do?
A: The Traveler Privacy Protection Act is a bipartisan bill that aims to restrict the TSA’s use of facial recognition at checkpoints and reset the default to traditional identity verification unless travelers opt in to FRT.
Q: What are the main findings of the Getronics 2025 Travel Trust Barometer?
A: The Getronics 2025 Travel Trust Barometer found that 53 percent of British passengers prioritize a smooth journey over data protection, while 66 percent are comfortable using biometrics on their phones and 76 percent for facial recognition.
Q: What are the key cybersecurity concerns for airports in the age of biometric technology?
A: Airports are now complex digital ecosystems, and the cybersecurity attack surface is expanding rapidly. There is a persistent rise in targeted attacks on passenger data systems, biometric platforms, and third-party integrations critical to airport operations.Â