Push towards risk-based profiling of passengers
But as details emerge on how governments and airlines plan to distinguish between "trusted travellers" and those who will receive more scrutiny, civil liberties groups and some European regulators are questioning the use of personal data to decide which travellers to examine more closely.
Sharing information on passengers is at the heart of the new effort. The information governments use to vet passengers includes data individuals volunteer by applying for trusted traveller programs, as well as that gathered via terrorist watch lists, criminal background checks and customs encounters.
The risk-based approach extends to the list of items prohibited from the cabin, which the US Transportation Security Administration has revised to allow small pocketknives.
The government is also looking at data airlines and travel agents have collected on customers, ranging from birth dates and passport numbers to details apparent in itineraries (such as a flight to Pakistan) and group discount codes (for a trip to a conference, for instance).
For passengers on international flights, much of the data in these "passenger name records" is already shared with the US Department of Homeland Security.
The prospect of using passenger data for airport screening has exposed a fissure between more privacy-oriented European officials and their US counterparts.
Federal commissioner for data protection in Germany Peter Schaar told an aviation security conference in New York last week any system using passenger data to assess risk must be proved to be effective at rooting out terrorists, must be proportional without violating privacy rights and must avoid side effects like discrimination.
That perspective was in the minority at the event, organised by the International Air Transport Association and largely attended by screening equipment manufacturers, airline and airport security directors and government officials eager to move ahead with what they called the "passenger differentiation concept".
The US would also like to use more behaviour detection officers in security lines.
While airlines and equipment manufacturers are seeking similar security procedures worldwide, sharing travellers' data across borders presents complex challenges. Governments are debating how to recognise trusted visitors, and how to respond if nations such as China start asking for the same level of passenger data the US demands.
"The notion that the government is in any position to judge who is trusted and who is risky is very problematic," said Jay Stanley, from the American Civil Liberties Union. "Terrorist attacks on airlines are basically freak events ... so any attempt to predict who is likely to engage in that type of thing is inevitably going to sweep up a vast number of innocent people."
Frequently Asked Questions about this Article…
Risk-based passenger screening is a system that focuses airport security resources on travellers judged more likely to pose a threat, rather than treating every passenger identically. Aviation authorities and the travel industry support it as a way to target screening more efficiently, using passenger information to distinguish 'trusted travellers' from those who receive more scrutiny.
Authorities would use a mix of data: information travellers volunteer when applying for trusted traveller programs, terrorist watch lists, criminal background checks, customs encounter records, and details from passenger name records such as birth dates, passport numbers, itineraries and booking codes.
Trusted traveller programs rely on travellers volunteering personal data and being vetted; governments and airlines would use those vetting results alongside other passenger data to mark some passengers as lower risk. Governments are still debating how to recognise trusted visitors consistently, especially across borders.
Privacy-focused regulators and civil liberties groups warn that using personal data to assess risk could violate privacy rights, lead to discrimination, and sweep up innocent people. Germany’s federal data protection commissioner said any system must be proven effective, proportional and avoid harmful side effects, and the ACLU has questioned whether governments can reliably judge who’s 'trusted' or 'risky.'
Yes — the risk-based approach extends to prohibited cabin items. The US Transportation Security Administration has already revised rules to allow small pocketknives for some travellers as part of that thinking.
The US is looking to deploy more behaviour detection officers in security lines to complement data-driven profiling, adding another layer of observation-based screening to the approach described at recent aviation security events.
Sharing traveller data internationally raises complex issues: countries must decide whether to recognise each other’s trusted travellers, cope with differing privacy standards, and respond if nations demand the same level of passenger data the US requests, which complicates efforts to standardise security worldwide.
Effectiveness is debated. European regulators said any risk-based system must be proven to actually root out terrorists and be proportional, while civil liberties advocates argue that terrorist attacks are unpredictable and predictive profiling may still affect many innocent people.

