Secure Flight

Secure Flight is a passenger pre-screening program for flights in the United States, managed by the Transportation Security Administration (TSA). It is a risk-based system that matches passenger information against watch lists maintained by the federal government. Results are used to communicate with airlines about high or low risk passengers.^[1]

History

Airlines previously pre-screened passengers using CAPPS by comparing names to government watch lists and communicating with law enforcement (and later TSA) about suspected passengers. This process was inconsistent across airlines and not effective in preventing the September 11 attacks.^[2] The final report of the National Commission on the Terrorist Attacks Upon the United States recommended that this watch list matching function be performed by the TSA instead of airlines.^[3]

The Intelligence Reform and Terrorism Prevention Act (IRTPA) of 2004 required the Department of Homeland Security (DHS) to assume from aircraft operators the function of conducting pre-flight comparisons of airline passenger information to federal government watch lists for international and domestic flights by 2005.^[4] The Secure Flight program was introduced in August 2007, which proposed requiring airlines to send passenger information to the TSA for comparison against watch lists. The TSA would respond with instructions to either screen a passenger normally, use enhanced screening, or denial into the sterile area.^[5] They hoped this new system would reduce the number of people accidentally being matched to a watch list.^[6]

The Secure Flight Final Rule was issued in October 2008 and officially began the transfer of watch list matching to the TSA.^[7] Secure Flight began implementation with select domestic aircraft operators at the beginning of 2009 and completed implementation for all domestic and international airlines in December 2010.^[8]

In 2010, the program transitioned to a risk-based system in response to the attempted attack of Northwest Airlines Flight 253 in December 2009. This allowed the system to identify people not in watch lists. In 2011, the TSA began to use the entire Terrorist Screening Database instead of being limited to the No Fly List or Selectee List.^[9]

In 2013, the program was further expanded to search private databases for information like past travel with the intention of identifying low risk people for TSA PreCheck.^[10]

Usage

The program requires airlines to obtain the full name, sex, date of birth, Redress Number, and Known Traveler Number of passengers and people who need access to the sterile area. The information is transferred to the TSA seventy-two hours prior to the departure time of a flight. The TSA compares information with government watch lists like the No Fly List and Selectee List within the Terrorist Screening Database. After this process, the TSA provides airlines with a decision to issue boarding passes with normal screening, Secondary Security Screening Selection, or denial of a boarding pass.^[11]

Privacy

TSA has stated it will not collect or use "commercial data"^{[clarification needed]} to conduct Secure Flight watch list matching.^[12] It has also released a Privacy Impact Assessment (PIA).^[12] The TSA policy, however, makes no mention of any limitations on what the airlines themselves, who collect the sensitive (birth date, etc.) information, may do with this.^[12]

Secure Flight has many similarities with CAPPS and the No Fly List, and therefore raises the same validated^[13] concerns about civil liberties and due process. Specifically, civil libertarians argue that under the Secure Flight program, there are insufficient redress mechanisms for innocent citizens on watch lists. Additionally, the content and quantity of the watch lists has fallen under scrutiny.^[14]

Overflight

The Secure Flight Programme applies to non-US flights overflying the United States. TSA uses a table of airport pairs to determine if a flight is overflying the United States.

TSA Secure Flight Overflight Table from 06JAN2014 to 28OCT2016

See also

• Airport security
• No Fly List
• Multistate Anti-Terrorism Information Exchange
• Travel technology