Shostack + Friends Blog Archive

 

UnClear where the data will go

So Clear’s Verified Line Jumper service has shut down. Aviation Week has a blog post, “
Clear Shuts Down Registered Traveler Lanes
.”
[link to http://www.aviationweek.com/aw/blogs/commercial_aviation/ThingsWithWings/index.jsp?plckController=Blog&plckScript=blogScript&plckElementId=blogDest&plckBlogPage=BlogViewPost&plckPostId=Blog%3a7a78f54e-b3dd-4fa6-ae6e-dff2ffd7bdbbPost%3ad3867997-f8fd-403d-93ef-a7c047cd849a no longer works]

Clear collected a lot of data:

The information that TSA
requires us to request is full legal name, other names used, Social Security number (optional), citizenship, Alien Registration
Number (if applicable), current home address, primary and secondary telephone numbers, current email address, date of birth,
place of birth, gender and height. TSA also lists as optional, but helpful, the following personal information: home addresses,
driver’s license number and employer’s name and address…digital photo and digital images of all of your fingerprints and your irises…your credit card.

This raises a very serious problem with a company like Clear/Verified Identity Pass, Inc. The in-depth, validated customer data is likely to count amongst such a company’s most valuable assets. Their privacy policies make no mention of what would happen to it in the event that the company goes bust.

Does anyone know where Clear was incorporated? Maybe I’ll bid at the bankruptcy auction.

[Update: Tamzen points out that there’s an update on their site, promising that Clear will abide by the “Transportation Security Administration’s Security, Privacy and Compliance Standards” and “take appropriate steps to delete the information.” Google thinks that those standards might refer to “Transportation Security Administration’s Security, Privacy and Compliance Standards.” [link to http://www.tsa.gov/approach/rt/index.shtm no longer works] Me, I wonder why they say “take appropriate steps” rather than just promising to delete it. Back in the day, Brill’s Content might have taken them to task for that.]

2 comments on "UnClear where the data will go"

  • Tamzen says:

    http://www.flyclear.com/ now states:
    What will happen to my personal information?
    Applicant and Member data is currently secured in accordance with the Transportation Security Administration’s Security, Privacy and Compliance Standards. Verified Identity Pass, Inc.  will continue to secure such information and will take appropriate steps to delete the information.
    Will I receive a refund for membership in Clear?
    At the present time, because of its financial condition, Verified Identity Pass, Inc. cannot issue refunds.

  • Chris says:

    Oh my….
    http://www.wired.com/epicenter/2009/06/clear-plans-to-sell-traveler-data/
    What’s that quotation? “All non-trivial….”

Comments are closed.