The Department of Homeland Security is withdrawing a proposal to require all US citizens to submit to facial scans when entering or exiting the country.

On Thursday, the department's US Customs and Border Protection (CBP) said it would remove the proposed requirement amid growing concerns the facial scans could violate people's privacy and risk leaking sensitive biometric data to hackers.

The current policy requires most foreign travelers to submit to the facial scans, which have been rolling out across major US airports, seaports, and—most recently—the US-Mexico border. US citizens, on the other hand, can tell Customs officials or airline employees they'd like to opt out.

However, last month CBP filed a notice to change the rules to mandate US citizens also submit to the facial scans. The agency told PCMag the proposal was driven by concerns that having two separate processes for foreign nationals and US citizens at ports of entry would create logistical challenges that would risk impacting security, wait times, and traveler experience.

But after consulting with lawmakers and privacy experts, CBP determined the existing opt-out approach was best. "There are no current plans to require US citizens to provide photographs upon entry and exit from the United States. CBP intends to have the planned regulatory action regarding US citizens removed from the unified agenda next time it is published," the agency's spokesperson added.

News of the reversal, which was first reported by Politico, prompted US Sen. Ed Markey (D-MA) to say he would introduce legislation to "ban this kind of surveillance." He's particularly concerned with the risks associated with collecting and then storing the biometric data of millions of Americans. In June, for example, hackers stole files from CBP by breaching a third-party contractor.

"Homeland Security wants to scan the face of every American traveling through a US airport even though it recently allowed the biometric info it already collects to be stolen. That's a privacy risk we can't take. I'm introducing legislation to block this attack on our privacy," Markey said in a tweet.

The facial scans are essentially designed to automate manual identity checks at airports. The technology works by taking a picture of the traveler, and then comparing the image to the passport, visa, and other official photos DHS has on the subject.

According to CBP, the facial scans can help Customs officials identify suspected criminals and terrorists who may be fraudulently using someone else's ID to enter or exit the country. The agency also says it's committed to keeping the public in the loop about the use of the facial scans to ensure transparency. The day before, CBP said it met with US lawmakers, privacy experts, and industry stakeholders to discuss the technology and the privacy safeguards that have been put in place.

(Photo from ACLU)

"To date, CBP and its partners have introduced biometric facial comparison technology at more than 20 US air, sea, and land ports of entry. The technology has enabled CBP to interdict more than 200 individuals who illegally attempted to enter the United States by using the genuine travel documents of persons whom they resemble," the agency added.

Nevertheless, the American Civil Liberties Union is concerned the same technologies could pave the way for the government to monitor US citizens. "The government cannot be trusted with this surveillance technology, and Congress should put the brakes on its use," ACLU senior policy analyst Jay Stanley said in an email.

Although US citizens can opt out of the facials scans, many are probably unaware they have the choice to decline getting their photo snapped. The ACLU also notes one of its lawyers recently tried to opt out from the scans only to be rebuked by a border official.

"The CBP officer I encountered last week ignored my repeated protests, claimed ignorance of the signs plastering the port, and told me I could not opt-out. 'Why are you so concerned? We have all your information anyway,' was the last thing the officer said before waving me through," ACLU policy counsel Shaw Drake wrote in the post.

CBP hasn't immediately commented on the ACLU's claims. But the agency says it'll only hold on to photos taken of US citizens for 12 hours, which is down from the previous policy of 14 days.

Further Reading

Security Reviews