Biometric Air Exit Policies and
Project Authorization
Item No. 8a _ supp
Meeting Date: March 10, 2020
Commission Biometrics Principles & Progress
• Outlined seven (7) principles for public-facing biometrics at Port facilities
• Directed staff to put a hold on new or expanded uses of biometrics at Port facilities until
policies are adopted
• Staff is developing five “use case” policy recommendations:
o Biometric Air Exit (drafted, vetted)
o Biometric Air and Cruise Entry (drafted, not yet vetted)
o Non-Federal Biometric Passenger Processing (drafted, not yet vetted)
o Biometrics for Customer Functions
o Biometrics for Law Enforcement and Security Functions
2
What is Biometric Exit?
1. CBP has begun implementing its biometric exit
program through its development of the Traveler
Verification Service (TVS), a system of related
databases hosted by CBP, containing the
biometric facial recognition “template” of
individuals that are ticketed on international
flights, such as from passport or visa application
photos.
2. Airports and airlines are not currently mandated
to participate in CBP’s biometric air exit program
(two dozen airports have already). Authorized
users of TVS are required by CBP to comply with a
set of business requirements.
3. If an airport or airline does not choose to partner
with CBP to implement biometric air exit, CBP has
authority to implement the program using its own
staff and equipment at any international air
departure gate. This is already occurring at SEA on
certain departing Lufthansa, Hainan, Emirates and
Virgin Atlantic flights.
3
Does Biometric Air Exit Meet Commission Biometric Principles?
Yes, if Port policies are complied with (see Appendix)
4
Principle Biometric Air Exit
Justified
Identity verification is a standard customs and border protection process;
biometric air exit automates it
Voluntary
Any traveler can opt
-out; Port can ensure they’re informed of this right
Private
CBP has extensive privacy policies; airports/airlines must follow them
Equitable
CBP’s TVS algorithm top rated by NIST for accuracy; Port can set training
standards
Transparent
CBP has messaging; Port can enhance
Lawful
Extensive Congressional mandates for biometric air exit; CBP/airport/airlines
required to follow all relevant laws
Ethical
Port can oversee and support ethical behavior
Requesting Commission Authorization
• Authorization includes:
– Hardware, software and vendor
implementation services
– Port staff for construction and
implementation
– Contract for up to 10 years for
license, service, and maintenance
• Total project cost is $5,715,000
5
• Biometric Air Exit System at up to 30 international departure
gates (only in place/use for international departures)
• System must fully align with Biometric Air Exit Policies
South Sat.
A Concourse
Biometric Air Exit Solution
• RFP requires full alignment with Biometric Principles & Biometric Air
Exit Policies
• Selected product requires mandatory compliance with:
– Port of Seattle’s Biometric Air Exit Policy and Biometric Principles
– U.S. Customs and Border Protection Biometric Air Exit Business Requirements
– Traveler Verification Services Technical Reference Guide – Identify API
– Traveler Verification Services Technical Reference Guide – Authentication API
– Privacy Impact Assessment for the Traveler Verification Service
– Port of Seattle Technology & Cyber-security standards including the Port of
Seattle’s Software as a Service Survey for cloud-based solutions
6
Planned Schedule
7
Q1
2020
Q2
2020
Q3
2020
Q4
2020
Q1
2021
Q2
2021
Advertise
RFP
Evaluation
Biometric Air Exit
Policy Implemented
Award
Contract
Design, Configuration,
and Test
Airline Coordination and Training
Installation and Signage
Questions?
8
Biometric Air Exit Policies as proposed, Part 1
9
Justified
•
Aviation Director approves all applications that do not require Commission authorization.
•
Aviation Director must first notify the Port Executive Director and the Port Commission.
•
The Managing Director should seek feedback from the Technology Ethical Advisory Board.
•
If the Port implements a common use biometric air exit solution, it must be used for all
departing international flights at SEA.
Voluntary
•
The Port should develop standards/guidelines for avoiding unintended image capture.
•
The Port should design training standards for avoiding unintended capture.
Privacy
•
The Port should seek clarification on whether transmission of biometric data is exempt from
state public disclosure requirements.
•
All transmission of biometric data should meet CBP’s Biometric Air Exit Requirements
regarding encryption and other security standards, retention/deletion standards, and
unauthorized use/access standards.
Biometric Air Exit Policies as proposed, Part 2
10
Equitable
•
The Port should request updated accuracy rates from CBP.
•
The Port should develop training standards for collecting and processing biometric data.
Transparent
•
The Port should develop a comprehensive communications plan, and produce an annual
accountability report.
•
The Port should periodically conduct its own performance evaluation to verify CBP’s audit
results and ensure that airline staff are following all Port policies.
Lawful
•
The Port and airlines must comply with all state and federal laws including privacy and
discrimination laws.
•
The Port should advocate for state and federal laws and regulations that codify the goals of
the Port’s biometric principles.
Ethical
•
The Port should develop an engagement plan to educate local immigrant and refugee
communities about the biometric air exit program.
•
The Port should inform local immigrant and refugee communities about resources for sharing
concerns/complaints.
The Port should form a Tec hnology Ethical Advisory Board.
