Slashdot Mirror
TSA Asked to Ensure Safety Of Customer Data After Clear Closing
CWmike writes "The chairman of the House Committee on Homeland Security, Bennie Thompson (D-Miss.), has given the Transportation Security Administration (TSA) until July 8 to explain how the agency plans to ensure the security of private data collected by a recently shuttered company that offered a registered traveler program. In a letter to the TSA's acting assistant secretary, Thompson expressed his concern over the abrupt closure of Verified Identity Pass (VIP), which offered a service called Clear for a $199 annual fee that helped air travelers get through airport security checks faster by vetting their identities and backgrounds in advance. VIP has left open the possibility that the data could end up being acquired or sold to a third-party, but only if it was going to be used for a registered traveler program."
According to the Computerworld article:
"They had your social security information, credit information, where you lived, employment history, fingerprint information," said Clear customer David Maynor, who is chief technical officer with Errata Security in Atlanta. "They should be the only ones who have access to that information."
and
"Other providers, who may now be interested in purchasing Clear's assets, include Flo and Preferred Traveler. "
Given the capability by companies to effectively hide their interested principals through convoluted international structures I wonder how hard it would be for a front-company to buy this info on behalf of criminal organisations, terrorist groups or other nation states.
Rather brilliantly, by having this card you didn't reduce the security checks at the airport - you just got to skip to the front of the queue. This does mean that security wasn't compromised in the slightest - but it also raises the question of why the company kept doing expensive background checks that served no purpose since the card didn't get you through security!