In an "emergency" notice, the department's Transportation Security Administration said that the requirement is necessary to test a controversial computer "prescreening" system that attempts to identify terrorists before passengers are permitted to board their flight. The system is called Secure Flight.
The information that airlines will be required to divulge by Oct. 29 includes, at a minimum, the passenger's name, reservation date, travel agent, itinerary information, form of payment, flight number and seating information.
TSA said that it will use those passenger records in two ways. First, it will verify that Secure Flight is able to match information on air travelers with records stored in government databases. Second, it will combine the passenger records with data purchased from unspecified "commercial data aggregators who provide services to the banking, home mortgage and credit industries" to see how much it may help the data-mining process.
Secure Flight is the renamed successor to the embattled Computer Assisted Passenger Prescreening System (CAPPS), which had drawn fire from some members of Congress who worried about the privacy implications of performing intensive background checks on Americans who chose to travel by air. Homeland Security Secretary Tom Ridge said in July that CAPPS would be dismantled for that reason.
The department hopes that Tuesday's announcement, which promises that the data will be stored safely and securely, will quell some of the privacy worries. In a separate notice, TSA privacy official Lisa Dean wrote that the agency "believes it has taken action to mitigate any privacy risk by designing its next-generation passenger prescreening program to accommodate concerns expressed by privacy advocates, foreign counterparts and others."
Marcia Hofmann, staff counsel of the Electronic Privacy Information Center, said that it was "unclear" whether TSA had the legal authority to demand the airlines' records. Hofmann also questioned whether it was wise to expand reliance on "watch lists" or "no fly lists," which can be problematic for innocent people whose names resemble those on the list.
Airlines will have a month to comment on the proposal before it takes effect. They will be required to divulge passenger records on optical media in an XML or other structure data format if available.
