TSA Asked to Ensure Safety Of Customer Data After Clear Closing
CWmike writes "The chairman of the House Committee on Homeland Security, Bennie Thompson (D-Miss.), has given the Transportation Security Administration (TSA) until July 8 to explain how the agency plans to ensure the security of private data collected by a recently shuttered company that offered a registered traveler program. In a letter to the TSA's acting assistant secretary, Thompson expressed his concern over the abrupt closure of Verified Identity Pass (VIP), which offered a service called Clear for a $199 annual fee that helped air travelers get through airport security checks faster by vetting their identities and backgrounds in advance. VIP has left open the possibility that the data could end up being acquired or sold to a third-party, but only if it was going to be used for a registered traveler program."
Is anyone else bothered by the very existence of these companies? "Pay us and we'll get you through the security faster by taking all this personal information and running it through the security checks early, etc."
The hassle is a part of the security program designed by the TSA to keep Americans safer, not create new business opportunities. It seems to me the TSA should be offering the same service to travelers for free. Let people submit the same information beforehand, have all the info run through checks, and stored so folks are less inconvenienced by the "safety measures" they insist on.
According to the Computerworld article:
"They had your social security information, credit information, where you lived, employment history, fingerprint information," said Clear customer David Maynor, who is chief technical officer with Errata Security in Atlanta. "They should be the only ones who have access to that information."
and
"Other providers, who may now be interested in purchasing Clear's assets, include Flo and Preferred Traveler. "
Given the capability by companies to effectively hide their interested principals through convoluted international structures I wonder how hard it would be for a front-company to buy this info on behalf of criminal organisations, terrorist groups or other nation states.