← All travel signals
Trust signal

The Kept Face

Airport face matching is turning identity checks into stored records. DHS’s inspector general found TSA’s scanner vendor could extract travellers’ ID images unseen.

What is it?

Face matching at airports needs a stored photo to compare against, and sometimes keeps what it captures. The US now holds non-citizens’ faces for up to 75 years. At TSA checkpoints, a vendor could extract ID images without the agency knowing, an inspector general found.

Why now?

On 15 September 2026 the DHS inspector general reported that TSA could not verify its CAT-2 vendor deleted the licence and passport images it extracted. No misuse was reported. CBP’s rule capturing every non-citizen’s face at exit has applied since December 2025.

Who’s building it?

CBP, TSA, their biometric vendors, and the DHS inspector general auditing what gets kept.

CBPTSABiometric vendorsDHS inspector generalEPIC
The full read
Why now, who is building it, where the market goes, and what stays unsettled.
Get weekly →
01 · The market
Who’s in it
Builders — CBP, TSA and the vendors maintaining their scanners.
Buyers — travellers who show a face at the gate and are told it is deleted.
Gatekeepers — the DHS inspector general and privacy advocates such as EPIC.
What’s at stake
Whether a promise to delete a face can be checked by anyone outside the agency that made it.
Who may touch stored biometric data during system maintenance.
How long a border photo outlives the trip.
What’s unsettled
How many passengers’ ID images the vendor actually extracted.
Whether TSA’s accepted fixes will ever be independently verified.
Whether uses for kept faces widen, as privacy advocates warn they could.
02 · How the demand matureda progression, not a timeline
Novelty
Face matching replaces the officer’s glance at a passport photo.
Retention
Non-citizens’ faces are kept for decades; citizens’ are discarded within 12 hours.
Willingness to pay
Travellers trade a face for speed, trusting a deletion promise they cannot check.
Category
Deletion becomes a claim that inspectors test, not a line in a notice.
03 · Where the market goesthe forks, not a prediction
→Access is locked down: vendor maintenance is logged and deletion is certified, and the deletion promise gains proof behind it.
→Findings repeat at other agencies, and kept faces become a routine audit theme.
→Uses for stored border photos widen, as advocates warn, and retention becomes the political fight.
→Nothing changes in practice, and the finding fades as a single audit.
The forks turn on whether deletion becomes something an outsider can verify, or stays a promise made by the system that holds the face.
04 · The Retained Identity deskadjacent market, moving now
The Biometric Bottleneck
Europe matches every visitor’s face and fingerprints.
Over 145 million entries and exits registered.
European Commission
Beyond the Blink Test
Sign-in moves from passwords toward the body itself.
Microsoft is moving enterprise sign-in users onto passkeys by default.
Computerworld
Ambient Surveillance
Always-on sensing that logs daily life at scale.
The EU banned workplace emotion-recognition AI from 2 February 2025.
European Commission
05 · The Wire
01
DHS’s inspector general found TSA’s vendor could extract traveller images.
DHS Office of Inspector General ↗
02
Coverage calls it a significant weakness; no misuse reported.
Biometric Update ↗
03
A DHS final rule lets CBP capture the face of every non-citizen at entry and exit, and keep it for up to 75 years.
CBP ↗
04
Exit face checks were piloted at 57 airports, and CBP claims a minimum 97% matching accuracy.
Nextgov/FCW ↗
The panel on this signal
They agreed on
–The risk sits in maintenance access and missing logs, not in the face matching algorithm itself.
–No misuse was found, and none was ruled out.
–Retention rules differ sharply by citizenship, from 12 hours to 75 years.
The government records-retention archivist disagreed on
–The 75-year hold is the real story; a schedule that long makes every later vendor gap far more costly.
Know more about the method →
✦How this signal was built
01 · Panel
A Delphi panel of 4 AI analysts, each reasoning independently.
→
02 · Debate
They challenge and revise each other’s reads over two rounds.
→
03 · Evidence
Every claim is tied to a cited, linked source on The Wire.
→
04 · Synthesis
A moderator writes it into one read, disagreement and all.