§44926 — Title 49 Transportation | U.S. Code

Summary

Requires the Secretary of Homeland Security to set up a quick, fair way for people who think they were wrongly delayed or not allowed to board a plane because they were mistaken for a threat to appeal and fix the error. The Department must create an Office of Appeals and Redress with staff from TSA, CBP, and other parts of DHS to run the process and keep records of people who were misidentified and who corrected wrong information. The office must keep identity-checking details to prevent repeat problems, share needed info with TSA, CBP, and other DHS parts to help airlines reduce false matches, and require airlines to help identify travelers found to be wrongly flagged. PII means personally identifiable information. Employees handling PII must get privacy and security training. Records must be protected (for example by encryption or hashing), only the minimum data needed may be kept, data must move over an audited secure network, and handling must follow section 552a of title 5 and the Federal Information Security Management Act of 2002 (Public Law 107–296). The office must keep data only as long as needed, publish a privacy impact assessment, send that assessment to the House Committee on Homeland Security, the Senate Committee on Commerce, Science, and Transportation, and the Senate Committee on Homeland Security and Governmental Affairs, and provide ways at major DHS airports for passengers to start the redress process.

Title 49, §44926

Transportation — Source: USLM XML via OLRC

(a)The Secretary of Homeland Security shall establish a timely and fair process for individuals who believe they have been delayed or prohibited from boarding a commercial aircraft because they were wrongly identified as a threat under the regimes utilized by the Transportation Security Administration, United States Customs and Border Protection, or any other office or component of the Department of Homeland Security.

(b)(1)The Secretary shall establish in the Department an Office of Appeals and Redress to implement, coordinate, and execute the process established by the Secretary pursuant to subsection (a). The Office shall include representatives from the Transportation Security Administration, United States Customs and Border Protection, and such other offices and components of the Department as the Secretary determines appropriate.

(2)The process established by the Secretary pursuant to subsection (a) shall include the establishment of a method by which the Office, under the direction of the Secretary, will be able to maintain a record of air carrier passengers and other individuals who have been misidentified and have corrected erroneous information.

(3)To prevent repeated delays of a misidentified passenger or other individual, the Office shall—

(A)ensure that the records maintained under this subsection contain information determined by the Secretary to authenticate the identity of such a passenger or individual;

(B)furnish to the Transportation Security Administration, United States Customs and Border Protection, or any other appropriate office or component of the Department, upon request, such information as may be necessary to allow such office or component to assist air carriers in improving their administration of the advanced passenger prescreening system and reduce the number of false positives; and

(C)require air carriers and foreign air carriers take action to identify passengers determined, under the process established under subsection (a), to have been wrongly identified.

(4)The Secretary, in conjunction with the Chief Privacy Officer of the Department shall—

(A)require that Federal employees of the Department handling personally identifiable information of passengers (in this paragraph referred to as “PII”) complete mandatory privacy and security training prior to being authorized to handle PII;

(B)ensure that the records maintained under this subsection are secured by encryption, one-way hashing, other data anonymization techniques, or such other equivalent security technical protections as the Secretary determines necessary;

(C)limit the information collected from misidentified passengers or other individuals to the minimum amount necessary to resolve a redress request;

(D)require that the data generated under this subsection shall be shared or transferred via a secure data network, that has been audited to ensure that the anti-hacking and other security related software functions properly and is updated as necessary;

(E)ensure that any employee of the Department receiving the data contained within the records handles the information in accordance with the section 552a of title 5, United States Code, and the Federal Information Security Management Act of 2002 (Public Law 107–296);

(F)only retain the data for as long as needed to assist the individual traveler in the redress process; and

(G)conduct and publish a privacy impact assessment of the process described within this subsection and transmit the assessment to the Committee on Homeland Security of the House of Representatives, the Committee on Commerce, Science, and Transportation of the Senate, and Committee on Homeland Security and Governmental Affairs of the Senate.

(5)The Office shall establish at each airport at which the Department has a significant presence a process to provide information to air carrier passengers to begin the redress process established pursuant to subsection (a).

Notes & Related Subsidiaries

Editorial Notes

References in Text

The Federal Information Security Management Act of 2002, referred to in subsec. (b)(4)(E), is title X of Pub. L. 107–296, Nov. 25, 116 Stat. 2259. For complete classification of this Act to the Code, see

Short Title

note set out under section 101 of Title 6, Domestic Security, and Tables.

Amendments

2018—Subsec. (b)(3). Pub. L. 115–254 substituted “a misidentified passenger” for “an misidentified passenger” in introductory provisions.

§44926 Appeal and Redress Process for Passengers Wrongly Delayed or Prohibited From Boarding a Flight