If you fly domestically on a major U.S. airline, your personal data could wind up in the hands of the Department of Homeland Security (DHS).
Wired first reported on a deal that DHS and its Customs and Border Protection (CBP) division has with Airlines Reporting Corporation (ARC), a data firm that focuses on airline tickets and passenger data.
According to Wired’s reporting, ARC sold access to airline customer records, including their names, full itineraries and financial details.
ARC did not immediately respond to a request for comment from USA TODAY.
The documents obtained by Wired show that CBP said it was using the data “to support federal, state, and local law enforcement agencies to identify persons of interest’s US domestic air travel ticketing information.”
ARC’s board of directors includes representatives from American Airlines, Delta Air Lines, Southwest Airlines, United Airlines and others.
According to the documents, ARC and the government agreed that the agencies would not disclose where they received the data ARC was providing.
The data provided is based on third-party airline ticket sales, not those purchased directly through the carrier. Still, the documents show it is updated daily and includes more than 1 billion itineraries over 39 months.
“CBP is committed to protecting individuals’ privacy during the execution of its mission to protect the American people, safeguard our borders, and enhance the nation’s economic prosperity. CBP follows a robust privacy policy as we protect the homeland through the air, land and maritime environments against illegal entry, illicit activity or other threats to national sovereignty and economic security,” a CBP spokesperson told Wired in a statement.
CBP did not immediately respond to a request for comment from USA TODAY.
Zach Wichter is a travel reporter and writes the Cruising Altitude column for USA TODAY. He is based in New York and you can reach him at zwichter@usatoday.com.
This article originally appeared on USA TODAY: An airline data broker is selling passenger data to CBP