Major U.S. companies exposed for selling off Americans’ private information

In the age of the internet, nothing is private. But when you’re making a profit off of it, it’s even worse.

Now major U.S. companies were exposed for selling off Americans’ private information.

Airlines’ Data Sales Raise Alarms

A recent report has uncovered that major U.S. airlines, through the Airlines Reporting Corporation (ARC), are selling detailed domestic flight passenger data to the Department of Homeland Security (DHS) and other federal agencies, sparking widespread concern about privacy violations.

ARC, jointly owned by airlines such as Delta, American Airlines, and United, primarily handles ticket settlements between airlines and travel agencies.

However, its lesser-known Travel Intelligence Program (TIP) collects and monetizes extensive passenger information, including names, full travel itineraries, and payment details.

Mechanics of ARC’s Data Program

The Travel Intelligence Program compiles over a billion records of past and future travel, updated daily, focusing on bookings made through travel agencies like Expedia, but excluding tickets purchased directly from airline websites.

Internal documents reveal that Customs and Border Protection (CBP), a DHS component, initiated a contract with ARC in June 2024 for $11,000, with a recent $6,800 extension, potentially continuing through 2029.

ARC reportedly requested that CBP keep its involvement confidential unless legally mandated to disclose, raising questions about the transparency of this data-sharing arrangement.

Federal Agencies’ Broad Access

Beyond CBP, procurement records show that multiple federal agencies, including Immigration and Customs Enforcement (ICE), the Secret Service, the Securities and Exchange Commission (SEC), the Drug Enforcement Administration (DEA), the Transportation Security Administration (TSA), and even the Air Force, have accessed TIP data.

CBP justifies its use, stating, “data is only used when a case is already open,” to support criminal and administrative investigations. DHS’s public Privacy Impact Assessment further defends the program as essential for active cases.

However, the involvement of such a wide range of agencies amplifies concerns about the scope of government access to private travel data, particularly without clear notification to affected passengers.

Privacy Concerns and Lack of Consent

Critics argue that ARC’s data sales set a troubling precedent for mass surveillance, as federal agencies bypass traditional legal oversight by purchasing information from private entities. The absence of traveler consent or awareness is particularly contentious, as individuals booking flights through travel agencies are unaware their data is being shared with government entities.

This practice undermines safeguards designed to protect against unwarranted intrusion, eroding the public’s expectation of privacy in everyday transactions. The sophisticated nature of the TIP database, with its vast and regularly updated records, heightens fears about the potential for misuse in tracking citizens without clear justification.

Broader Implications for Data Privacy

The ARC controversy reflects a growing trend where federal agencies acquire sensitive data from private firms, circumventing established legal channels. Customs and Border Protection’s 2020 seizures of 19,888 counterfeit driver’s licenses at Chicago O’Hare, many from China, illustrate the government’s focus on monitoring potential threats, but the TIP program’s scope extends far beyond such cases.

The fact that travelers are treated as data points in a commercial transaction, without their knowledge, raises ethical questions about the balance between national security and individual rights.