Biometric Data Meaning: One Face Scan, 75-Year Record

The face scan at the airport gate takes about two seconds. But according to the Department of Homeland Security's own final rule, if you're not a U.S. citizen, the photo taken in that moment can sit in a federal database for seventy-five years. Two seconds in. Three quarters of a century out.

If you've flown anywhere recently, you've probably

If you've flown anywhere recently, you've probably stood in front of one of these cameras. Maybe you didn't even notice it. And the thing is, most travelers think they're answering one simple question — is this really me? They are. But they're also, without knowing it, answering a second question they were never asked out loud. If that makes you uneasy, that's a fair reaction. So let's walk through what actually happens after the camera flashes — because the part that matters most is the part nobody sees.

Start in San Francisco. According to the San Francisco Public Press, the airport signed a contract worth about nine point eight million dollars with a company called SITA. They installed what are called FacePods — the camera kiosks that compare your live face to your travel document photo. The interesting detail isn't the technology. It's the contract language. The images captured there get sent to Customs and Border Protection automatically. Airport officials can't switch that off. It's not a setting. It's a requirement.

So where does that image go? Reporting from Reclaim the Net traces the pipeline. The picture flows into a system called the Traveler Verification Service, then out to other Homeland Security databases — one that flags travelers for extra scrutiny, another that logs who's arriving and departing. Eventually it lands in a central vault known as IDENT, which holds fingerprints, iris scans, and faces together in one place. One camera at one gate can touch five separate government systems, each with its own rules about who gets to look.

Retention. This part surprised me. Under the D.H.S.

Now, retention. This part surprised me. Under the D.H.S. rule that took effect in late twenty twenty-five, images of U.S. citizens are supposed to be deleted within about twelve hours. For non-citizens — including green card holders, students, tourists, people who've lived here for decades — that same photo can be kept for seventy-five years. Not seventy-five days. Seventy-five years. A child scanned today could be in her nineties before that record expires.

Here's the misconception I want to fix, and I understand completely why people hold it. Most of us assume the debate about face recognition is about accuracy. Does it work? Does it mix people up? That's a reasonable assumption, because vendors advertise ninety-nine percent accuracy, and news coverage focuses on misidentification cases. Accuracy is the part that's easy to measure. But accuracy and privacy are two completely different questions. A perfect match — the system getting you exactly right — still becomes a data-sharing event. It still travels to five databases. It still sits there for decades. Getting it right doesn't make it go away.

And there's a consequence to that. According to reporting from Mission Local and A.B.C. Seven in San Francisco, data shared with Customs and Border Protection can trigger alerts to Immigration and Customs Enforcement. Activists have documented arrests at S.F.O. that happened without a warrant. Most passengers also don't realize that when you buy a domestic ticket, the information you give the airline already flows to T.S.A. and C.B.P. — and starting last year, to I.C.E. as well. You never signed anything that said that.