The Traveler Privacy Protection Act of 2025 aims to significantly restrict the use of facial recognition technology by the Transportation Security Administration (TSA) in airports. It generally prohibits the capture, collection, storage, or processing of passenger biometric information through such technology without explicit consent. This measure seeks to enhance privacy protections for air travelers by amending existing federal law.

For passengers enrolled in Trusted Traveler Programs, the TSA may use facial recognition for identity verification at screening locations, but only if passengers are given clear notice and an option to opt-out. Those who choose to opt-out must not face discriminatory treatment, additional screening requirements, or less favorable conditions. General passengers not in these programs must provide affirmative express consent to opt-in to facial recognition use, with similar protections against discrimination for those who decline.

The bill imposes strict data minimization requirements, allowing facial images to be captured only as directly relevant and necessary for identity verification. It prohibits sharing biometric information outside the TSA and limits storage duration to complete verification or 24 hours for certain identification software. Furthermore, the Act explicitly bans passive surveillance, tracking, profiling, or discrimination based on facial recognition technology outside screening locations.

To ensure accountability, the legislation mandates the Comptroller General of the United States to submit annual reports to Congress. These reports will assess the technology's effectiveness, false positive/negative rates, and any bias, while also providing recommendations for protecting passenger privacy and civil liberties. The bill also requires the disposal of any previously collected biometric data that would violate these new provisions within 90 days of enactment.