DHS audit finds gaps in TSA oversight of passenger data access

A Department of Homeland Security inspector general audit found that a vendor could access and extract sensitive passenger information from TSA's facial comparison system without the agency's knowledge, EFF reported. The information included driver's license and passport images obtained during troubleshooting and system enhancements. TSA lacked clear policies, did not track extraction, could not verify deletion and did not notify passengers that their information might have been stored. The audit found passenger information was generally protected during routine operations, but vendor oversight weaknesses created retention and exposure risks. TSA agreed with all three recommendations. Two are open and resolved; one remains open and unresolved.