The US government and airlines are scanning faces of people not suspected of crimes, normalizing faces as data that can be kept, tracked, and inevitably, stolen
What's face recognition at the airport really about? Immigration policy and efficiency. — NEW YORK — You won't need …
Context & Ripple Effects
The Washington Post's 2019 critique landed in the middle of a running fight over the US Biometric Exit Program: within weeks, Wired was telling travelers to opt out of facial recognition until its legal and technical shortcomings were resolved, and by December the pressure worked — DHS dropped its proposal to scan US citizens arriving and departing.
What makes the story worth revisiting is what happened after: CBP scanned 23M+ people in 2020 and caught zero imposters at airports, yet by 2023 the TSA was planning to extend the program to ~430 airports, and by 2024 the New York Times was describing biometrics as simply how travelers move through airports. The normalization the Post warned about became policy.
First-order effects
- Travelers flying internationally from US airports are face-scanned without individualized suspicion, and their face images enter government-retained databases whether or not they know an opt-out exists.
- Airlines and CBP become de facto custodians of biometric identifiers that, unlike passports, cannot be reissued once compromised.
Second-order effects
- Public criticism has proven to be the program's main brake — the DHS retreat on scanning citizens shows expansion proceeds only where pushback is absent or exhausted.
- With security results thin (zero imposters caught at airports), the agencies' justification shifts to throughput and immigration enforcement, which reframes the debate from safety to convenience and gives airlines an incentive to market opt-in biometrics like the programs the Times later covered.
Third-order effects
- If the TSA's ~430-airport buildout holds, facial verification becomes default airport infrastructure rather than a pilot program, and opting out becomes the exception that requires effort and knowledge most passengers lack.
- Biometric data breaches stop being hypothetical for a population measured in tens of millions annually — stolen credentials get replaced, stolen faces do not — which sets up the governance question of who bears breach liability when the state and airlines both hold the data.
The trend: US air travel is moving from documents you carry to bodies you are, with biometric deployment outrunning the privacy safeguards and demonstrated security gains meant to justify it.