Traveler Privacy Protection Act of 2025

Key Points

• The bill stops the TSA from using facial recognition on most travelers unless they specifically agree to it. For people in programs like PreCheck or Global Entry, the TSA must clearly explain how their data is used and allow them to opt out at the security line without any penalty or extra wait time.
• For regular travelers not in special programs, the default would be checking a physical ID card. The TSA could only use facial scanning if a person "opts in" by giving clear, active permission. Simply standing in line or entering the airport does not count as giving permission.
• The TSA would be banned from using facial recognition for "passive surveillance," which means they couldn't use cameras to track or identify people as they walk through the airport. The technology could only be used at specific security checkpoints to verify who a person is.
• The bill sets strict limits on how long the government can keep your biometric data. Most facial images would have to be deleted immediately after identity is confirmed, or within 24 hours of a flight. Any old data that doesn't meet these new privacy rules would have to be deleted within 90 days.
• To ensure the technology is fair, the government would have to release yearly reports on how well it works. These reports must look for bias to see if the software is less accurate for certain groups based on their race, age, or gender.