TSA Biometric Expansion Sparks Privacy Bill Conflict

Published Date : 8/4/2025 

The Senate's abrupt decision to drop the Traveler Privacy Protection Act has sparked tensions between lawmakers and industry lobbyists, highlighting a growing rift within the Republican party over federal surveillance and privacy rights. 

In the wake of the Senate Committee on Commerce, Science and Transportation’s abrupt decision to squash consideration of the Traveler Privacy Protection Act from its scheduled markup last week, tensions are mounting not only between lawmakers and industry lobbyists, but also within the Republican party itself.

While public statements have largely focused on technical concerns and industry feedback, multiple Republican sources privately allege that the Transportation Security Administration (TSA), with backing from its politically appointed leadership, played a far more active role in orchestrating opposition to the bill than previously acknowledged.

According to Republican lawmakers and aides familiar with the matter, TSA officials, behind the scenes, worked in close coordination with airline industry representatives to build resistance to the legislation. That campaign, Politico reports, included private briefings, informal warnings to committee members, and direct appeals to Senate staff about the operational burdens the bill would impose.

The result was a growing wave of institutional resistance that culminated in the legislation being scrapped from the markup docket at the eleventh hour by Texas Republican Senator Ted Cruz, chair of the Commerce Committee and a lawmaker who has questioned TSA’s expanding use of biometrics. Cruz played a key role in the decision to postpone the bill’s markup, saying that committee members still had unresolved concerns about the bill’s scope and its impact on TSA operations. The delay, he said, would allow for further refinement of the proposal.

In November 2024, a bipartisan group of 12 senators that included Cruz had written the Department of Homeland Security’s Inspector General to urge him to investigate TSA’s expanding use of facial recognition technology at airports, citing concerns about accuracy, necessity, and potential erosion of passenger privacy. This past January, the lawmakers renewed their call for a probe of TSA’s use of biometrics.

What took place in Washington, DC last week has laid bare a rift between the Trump administration, which is eager to expand the role of automation and surveillance technologies across federal agencies, and a faction of Republican privacy hawks on Capitol Hill who view such unchecked expansion as an existential threat to civil liberties. These lawmakers, including Republican bill co-sponsor Sen. John Kennedy – typically an ardent Trump supporter – see TSA’s alleged interference as a direct attempt to subvert bipartisan congressional oversight.

Asked whether TSA had been actively raising concerns behind the scenes, Kennedy didn’t mince words. “The short answer is yes; the long answer is hell yes,” he said. “They’re working like an ugly stripper to kill this bill, which tells me we’re doing the right thing.”

Senator Kennedy’s characteristically blunt remarks reflect mounting frustration among lawmakers who argue that TSA’s lobbying efforts went too far, particularly given that the bill was designed to safeguard core opt-out rights and restrict the breadth of biometric data collection. To some observers on Capitol Hill, the Republican division over the bill signals a broader shift: a party increasingly willing to break ranks, emboldened by recent instances where GOP members have publicly diverged from Trump on a range of issues.

A senior Senate GOP aide, speaking on background, said earlier in the week that “the smears against [the] bill have TSA’s fingerprints all over it.” Fingerprints from cabinet-level leadership which almost always has the White House’s direct blessing before doing anything substantive. The aide pointed to talking points circulated by opposition groups that mirrored language used by TSA in previous public defenses of its facial recognition program. An implication of collusion between the administration and the very industry that it regulates. A level of complicity that also almost always requires White House blessing.

The aide also said TSA’s lobbying against the bill would “not bode well” for Acting TSA Administrator Ha Nguyen McNeill, whom Trump is expected to nominate to serve as the permanent administrator. McNeill previously served as president, commercial, and vice president of digital identity growth at BigBear.AI. Previously, she was executive VP of commercial and senior VP of strategic consulting at Pangiam, which was acquired by Big Bear.AI in 2024. As TSA chief of staff from 2017 to 2019, she championed the deployment of Computed Tomography (CT) scanners. Among her priorities as acting TSA administrator are the acceleration of CT, Credential Authentication Technology deployment, and public-private partnerships.

The internal Republican friction over the Traveler Privacy Protection Act highlights broader philosophical divisions over the future of federal surveillance and the boundaries of agency discretion. While the administration continues to champion TSA’s use of facial recognition as a model for cutting bureaucracy and modernizing air travel, some Republican lawmakers see the program as a dangerous overreach, especially when agencies appear to be mobilizing against legislation designed to place modest, legally enforceable guardrails on their expanding powers.

The failure of the Traveler Privacy Protection Act to advance out of committee represents more than a procedural hiccup. It reflects the growing difficulty of legislating privacy in an era of rapid technological adoption and powerful federal and industry resistance. The Traveler Privacy Protection Act was introduced by Democrat Senators Jeff Merkley, Ed Markey, and Republican Senators Kennedy and Roger Marshall. Their aim was to establish clear guardrails around the expansion of TSA’s biometric screening program. Specifically, it would have made traditional human ID verification the default at security checkpoints; reserved facial recognition for passengers who affirmatively opt in; and required that all facial scan data be deleted immediately after verification. Crucially, the legislation barred the reuse or repurposing of biometric data without express congressional authorization.

Supporters argued that the bill struck a practical balance between efficiency and rights, unlike an earlier, more sweeping 2023 version that sought to prohibit facial recognition at TSA checkpoints outright. This latest iteration focused on transparency, consent, and privacy protection, ensuring that travelers are not unknowingly swept into biometric programs without meaningful choice.

Independent investigations and civil rights watchdogs have documented cases in which travelers were discouraged or even obstructed from opting out of facial recognition scans, prompting widespread concern that the program is being implemented without adequate safeguards. Civil liberties organizations, including the Electronic Privacy Information Center (EPIC), were swift in their condemnation of the Senate’s decision to halt the bill. EPIC and other oversight groups have long warned that TSA’s use of facial recognition – already active at over 80 U.S. airports and slated to expand to more than 400 – risks normalizing biometric surveillance as a condition of travel.

EPIC Senior Counsel Jeramie Scott emphasized that “the act will ensure facial recognition technology is not forced upon the air traveling public and prevent TSA’s use of the tech from expanding beyond identity verification.” He noted that federal legislation is urgently needed to restrict mission creep and prevent private or government misuse of biometric data. Merkley echoed these concerns. “No one should be required to have their face scanned to travel,” he said. “Our act would preserve passengers’ right to use an approved document – like a driver’s license – to travel by air.”

Kennedy said the legislation would restore basic rights. “The TSA subjects countless law-abiding Americans to excessive facial recognition screenings as they travel, invading passengers’ privacy without even making it clear that they can opt out of the screening,” he asserted, adding, “The Traveler Privacy Protection Act would protect Americans’ ability to say ‘no’ to these facial scans and safeguard the personal data that the TSA collects.” “Passengers should not have to choose between safety and privacy when they travel,” Markey said. “Yet, the TSA has consistently ignored our calls to halt the unacceptable use of facial recognition tools and protect passenger privacy.”

But while the bill attracted bipartisan sponsorship, its momentum was blunted by a mix of industry pressure and internal legislative hesitation. Behind the scenes, the legislation faced a full-court press from airline industry leaders, travel organizations, and airport associations. In a joint letter to the Commerce Committee, trade groups such as Airlines for America and the International Biometrics + Identity Association urged lawmakers to reject the measure.

Their argument centers on operational and economic impacts. They assert that if TSA is forced to revert to manual identity verification, wait times will increase, bottlenecks will return, and technological innovation will be stifled. The groups estimate that nearly 75 percent of TSA’s current budget would need to be reallocated to workforce operations, dramatically reducing investments in automation, AI, and contactless security solutions. The travel industry has heavily invested in biometric infrastructure, including automated e-gates, facial recognition terminals, and digital ID verification platforms. For the aviation sector, these tools are not just conveniences, they’re viewed as essential to coping with historic volumes of air travel and chronic staffing shortfalls. Airlines and airport operators argue that facial recognition speeds up throughput, improves accuracy, and enhances the overall passenger experience, especially in a post-pandemic era where touchless systems are prioritized.

TSA, meanwhile, has defended its program on both operational and privacy grounds. The agency claims that facial scans are deleted immediately after verification except in limited test cases, and that passengers who decline scans are not penalized or delayed. TSA points to a recent report by the U.S. Privacy and Civil Liberties Oversight Board (PCLOB) which highlighted the need for better oversight and transparency in the use of biometric technologies at airports. 

Frequently Asked Questions (FAQS): 

Q: What is the Traveler Privacy Protection Act?

A: The Traveler Privacy Protection Act is a bill introduced by Senators Jeff Merkley, Ed Markey, John Kennedy, and Roger Marshall. It aims to establish clear guardrails around the expansion of TSA’s biometric screening program, making traditional human ID verification the default at security checkpoints and reserving facial recognition for passengers who opt in.

Q: Why did the Senate Committee on Commerce, Science and Transportation drop the bill?

A: The bill was dropped from the markup docket at the last minute due to growing institutional resistance, including private briefings and informal warnings from TSA officials and airline industry representatives about the operational burdens the bill would impose.

Q: What are the main concerns of Republican privacy hawks regarding TSA's biometric expansion?

A: Republican privacy hawks view TSA's expanding use of biometrics as an existential threat to civil liberties. They argue that TSA's lobbying efforts against the bill went too far and that the program is a dangerous overreach, especially when agencies appear to be mobilizing against legislation designed to place modest, legally enforceable guardrails on their powers.

Q: What is the stance of the airline industry on the Traveler Privacy Protection Act?

A: The airline industry, including trade groups like Airlines for America and the International Biometrics + Identity Association, has strongly opposed the bill. They argue that reverting to manual identity verification would increase wait times, bottlenecks, and stifle technological innovation, which is essential for coping with high volumes of air travel and chronic staffing shortfalls.

Q: What does TSA claim about the privacy and operational aspects of its biometric program?

A: TSA claims that facial scans are deleted immediately after verification except in limited test cases, and that passengers who decline scans are not penalized or delayed. The agency also points to a recent report by the U.S. Privacy and Civil Liberties Oversight Board (PCLOB) which highlighted the need for better oversight and transparency in the use of biometric technologies at airports. 

More Related Topics :