TSA PreCheck Expansion Act

Bill: 114-hr-2843
Sponsor: full_name: Rep. Katko, John [R-NY-24]
Introduced: 2015-06-19
Policy area: Transportation and Public Works
Subjects: Aviation and airports

Citizenship and naturalization

Criminal justice information and records

Government information and archives

Government studies and investigations

Marketing and advertising

Public-private cooperation

Right of privacy

Terrorism

Transportation safety and security

Travel and tourism
Latest action: action_date: 2016-03-07
text: Placed on Senate Legislative Calendar under General Orders. Calendar No. 383.

Summaries:
action_date: 2015-06-19
action_desc: Introduced in House
text: <p><strong>TSA PreCheck Expansion Act</strong></p> <p>This bill directs the Transportation Security Administration (TSA) to:</p> <ul> <li>establish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public's enrollment access to such program; </li> <li> coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet such standards, make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; </li> <li> partner with the private sector to collect biographic and biometric identification information via secure mobile enrollment platforms to reduce the need to travel to enrollment centers; and </li> <li> ensure that any biometric and biographic information is collected in a manner which ensures privacy and data security protections.</li> </ul> <p>The TSA must: </p> <ul> <li> develop and implement a process for approving private sector marketing of the program and a strategy for partnering with the private sector to encourage enrollment;</li> <li>report on any PreCheck fees collected in excess of the costs of administering such program;</li> <li> coordinate with the heads of appropriate Department of Homeland Security (DHS) components to leverage DHS-held data and technologies to verify the citizenship of individuals who want to enroll;</li> <li>partner with the private sector to use advanced biometrics and NIST 800-63-2 identity proofing standards to facilitate enrollment;</li> <li> ensure that TSA PreCheck screening lanes are available during peak and high-volume travel times at airports to enrolled individuals;</li> <li>provide for expedited screening at standard screening lanes during times when PreCheck screening lanes are closed; and</li> <li> ensure that enrolled individuals are vetted through the TSA's terrorist screening databases and develop effective recurrent vetting capabilities for disqualifying criminal offenses. </li> </ul>

action_date: 2015-07-22
action_desc: Reported to House with amendment(s)
text: <p><strong>TSA PreCheck Expansion Act</strong></p> <p>(Sec. 3) This bill directs the Transportation Security Administration (TSA) to publish application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public's enrollment access to such program.</p> <p>Upon publication of such standards, the TSA must:</p> <ul> <li> coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet such standards, make available additional enrollment capabilities, and offer secure online and mobile enrollment opportunities; </li> <li> partner with the private sector to collect biographic and biometric identification information via secure mobile enrollment platforms to reduce the need for passengers to travel to enrollment centers; </li> <li> ensure that any biometric and biographic information is collected in a manner that ensures privacy and data security protections; </li> <li> ensure that an individual who has started an enrollment application with a single identification verification at one location will be able to save such application on any platform and be able to return to submit a second identification verification; </li> <li> ensure that any enrollment expansion using a private sector risk assessment is determined to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation;</li> <li> develop and implement a process for approving private sector marketing of the TSA PreCheck program and a strategy for partnering with the private sector to encourage enrollment; and </li> <li> report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program.</li> </ul> <p>The TSA is required to:</p> <ul> <li>coordinate with the heads of appropriate Department of Homeland Security (DHS) components to leverage DHS-held data and technologies to verify the citizenship of individuals enrolling in the program;</li> <li> partner with the private sector to use advanced biometrics and NIST 800-63-2 identity proofing standards to facilitate enrollment;</li> <li> ensure that TSA PreCheck screening lanes are available during peak and high-volume travel times at airports to enrolled individuals;</li> <li> provide for expedited screening at standard screening lanes during times when PreCheck screening lanes are closed; and</li> <li> initiate an assessment of the security vulnerabilities in the vetting process for the program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the program. </li> </ul>

action_date: 2015-07-27
action_desc: Passed House amended
text: <p><strong>TSA PreCheck Expansion Act</strong></p> <p>(Sec. 3) This bill directs the Transportation Security Administration (TSA) to publish application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public's enrollment access to such program.</p> <p>Upon publication of such standards, the TSA must:</p> <ul> <li> coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet such standards, make available additional enrollment capabilities, and offer secure online and mobile enrollment opportunities; </li> <li> partner with the private sector to collect biographic and biometric identification information via secure mobile enrollment platforms to reduce the need for passengers to travel to enrollment centers; </li> <li> ensure that any biometric and biographic information is collected in a manner that is comparable with the National Institute of Standards and Technology (NIST) standards and that ensures privacy and data security protections, including that applicants' personally identifiable information is collected, retained, used, and shared in a manner consistent with the Privacy Act of 1974; </li> <li> ensure that an individual who has started an enrollment application with a single identification verification at one location will be able to save such application on any platform and be able to return to submit a second identification verification; </li> <li> ensure that any enrollment expansion using a private sector risk assessment is determined to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation;</li> <li> develop and implement a process for approving private sector marketing of the TSA PreCheck program and a strategy for partnering with the private sector to encourage enrollment; and </li> <li> report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program.</li> </ul> <p>The TSA is required to:</p> <ul> <li>coordinate with the heads of appropriate Department of Homeland Security (DHS) components to leverage DHS-held data and technologies to verify the citizenship of individuals enrolling in the program;</li> <li> partner with the private sector to use advanced biometrics and standards comparable to NIST standards to facilitate enrollment;</li> <li> ensure that TSA PreCheck screening lanes are available during peak and high-volume travel times at airports to enrolled individuals;</li> <li> provide for expedited screening at standard screening lanes during times when PreCheck screening lanes are closed; and</li> <li> initiate an assessment of the security vulnerabilities in the vetting process for the program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the program. </li> </ul>

action_date: 2016-03-07
action_desc: Reported to Senate with amendment(s)
text: <p><strong>TSA PreCheck Expansion Act</strong></p> <p>(Sec. 3) This bill directs the Transportation Security Administration (TSA) to continue to administer the Precheck Program (trusted traveler program).</p> <p>(Sec. 4) TSA shall publish application enrollment standards that add multiple private sector application capabilities for the PreCheck program to increase the public's enrollment access to such program.</p> <p>Upon publication of such standards, the TSA must:</p> <ul> <li> coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet such standards, make available additional enrollment capabilities, and offer secure online and mobile enrollment opportunities; </li> <li> partner with the private sector to collect biographic and biometric identification information via mobile enrollment platforms to increase enrollment flexibility and minimize the amount of travel to enrollment centers for applicants; </li> <li> ensure that any biometric and biographic information is collected in a manner that is comparable with National Institute of Standards and Technology (NIST) standards and that protects privacy and data security, including that any personally identifiable information is collected, retained, used, and shared in a manner consistent with the Privacy Act of 1974; </li> <li> ensure that the enrollment process is streamlined and flexible to allow an individual to provide additional information to complete enrollment and verify identity; </li> <li> ensure that any enrollment expansion using a private sector risk assessment is determined to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation;</li> <li> develop and implement a continual process for approving private sector marketing of the PreCheck program and a long-term strategy for partnering with the private sector to encourage enrollment; and </li> <li> report on any PreCheck Program application fees collected in excess of the costs of administering the program, including assessment of its feasibility and recommendations for using such amounts to support its marketing.</li> </ul> <p>The TSA shall:</p> <ul> <li>coordinate with the heads of appropriate Department of Homeland Security (DHS) components to leverage DHS-held data and technologies to verify the citizenship of individuals enrolling in the program;</li> <li> partner with the private sector to use biometrics and authentication standards such as those developed by NIST to facilitate enrollment;</li> <li>consider leveraging existing airport resources to conduct fingerprint and background checks to expedite identity verification;</li> <li> ensure that PreCheck Program screening lanes are available during peak and high-volume travel times at airports to enrolled individuals;</li> <li> provide for expedited screening at standard screening lanes during times when PreCheck Program screening lanes are closed; and</li> <li> initiate an assessment to identify security vulnerabilities in the vetting process for the program, including whether subjecting PreCheck Program participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the program. </li> </ul>

tv_txt: I 114th CONGRESS 1st Session H. R. 2843 IN THE HOUSE OF REPRESENTATIVES June 19, 2015 Mr. Katko (for himself, Mr. McCaul , and Mr. Rogers of Alabama ) introduced the following bill; which was referred to the Committee on Homeland Security A BILL To require certain improvements in the Transportation Security Administration’s PreCheck expedited screening program, and for other purposes.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) TSA The term TSA means the Transportation Security Administration. 3. Enrollment expansion (a) In general Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) establish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public’s enrollment access to such program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into such program; (2) coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet the TSA PreCheck application enrollment standards described in paragraph (1), make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; (3) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to reduce the number of instances in which passengers need to travel to enrollment centers; (4) ensure that the kiosks, mobile devices, or other mobile enrollment platforms referred to in paragraph (3) are certified as secure and not vulnerable to data breaches; and (5) ensure that any biometric and biographic information is collected in a manner which ensures privacy and data security protections, including that applicants’ personally identifiable information is handled only by individuals who have been properly vetted. (b) Marketing of PreCheck program Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) in accordance with the standards described in paragraph (1) of subsection (a), develop and implement— (A) a process, including an associated timeframe, for approving private sector marketing of the TSA PreCheck program; and (B) a strategy for partnering with the private sector to encourage enrollment in such program; and (2) submit to Congress a report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program under this subsection. (c) Identity verification enhancement Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage Department-held data and technologies to verify the citizenship of individuals who want to enroll in the TSA PreCheck program; and (2) partner with the private sector to use advanced biometrics and NIST 800–63–2 identity proofing standards to facilitate enrollment in such program. (d) PreCheck lane operation The Administrator shall— (1) ensure that TSA PreCheck screening lanes are open and available during peak and high-volume travel times at airports to individuals enrolled in the PreCheck program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck screening lanes are closed to individuals enrolled in such program in order to maintain operational efficiency. (e) Recurrent vetting for PreCheck applicants Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) ensure that individuals enrolled in the TSA PreCheck program are vetted through the TSA’s terrorist screening databases and make every practicable effort to develop effective recurrent vetting capabilities for disqualifying criminal offenses, and (2) submit to the to the Committee on Homeland Security of the House of Representatives and the Committee on Homeland Security and Governmental Affairs and the Committee on Commerce, Science, and Transportation of the Senate a report on the TSA’s recurrent vetting capabilities for individuals enrolled in such program.

tv_txt: IB Union Calendar No. 167 114th CONGRESS 1st Session H. R. 2843 [Report No. 114–221] IN THE HOUSE OF REPRESENTATIVES June 19, 2015 Mr. Katko (for himself, Mr. McCaul , and Mr. Rogers of Alabama ) introduced the following bill; which was referred to the Committee on Homeland Security July 22, 2015 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed Strike out all after the enacting clause and insert the part printed in italic For text of introduced bill, see copy of bill as introduced on June 19, 2015 A BILL To require certain improvements in the Transportation Security Administration’s PreCheck expedited screening program, and for other purposes.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) TSA The term TSA means the Transportation Security Administration. 3. Enrollment expansion (a) In general Not later than 90 days after the date of the enactment of this Act, the Administrator shall publish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public’s enrollment access to such program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into such program. (b) Requirements Upon publication of the PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet the TSA PreCheck application enrollment standards described in paragraph (1), make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; (2) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to reduce the number of instances in which passengers need to travel to enrollment centers; (3) ensure that the kiosks, mobile devices, or other mobile enrollment platforms referred to in paragraph (3) are certified as secure and not vulnerable to data breaches; (4) ensure that any biometric and biographic information is collected in a manner which ensures privacy and data security protections, including that applicants’ personally identifiable information is handled only by individuals who have been properly vetted; (5) ensure that an individual who wants to enroll in the PreCheck program and has started an application with a single identification verification at one location will be able to save such individual’s application on any kiosk, personal computer, mobile device, or other mobile enrollment platform and be able to return within a reasonable time to submit a second identification verification; and (6) ensure that any enrollment expansion using a private sector risk assessment instead of a fingerprint-based criminal history records check is be determined, by the Administrator, to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation. (c) Marketing of PreCheck program Upon publication of PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) in accordance with the standards described in paragraph (1) of subsection (a), develop and implement— (A) a process, including an associated timeframe, for approving private sector marketing of the TSA PreCheck program; and (B) a strategy for partnering with the private sector to encourage enrollment in such program; and (2) submit to Congress a report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program under this subsection. (d) Identity verification enhancement Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage Department-held data and technologies to verify the citizenship of individuals enrolling in the TSA PreCheck program; and (2) partner with the private sector to use advanced biometrics and NIST 800–63–2 identity proofing standards to facilitate enrollment in such program. (e) PreCheck lane operation The Administrator shall— (1) ensure that TSA PreCheck screening lanes are open and available during peak and high-volume travel times at airports to individuals enrolled in the PreCheck program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck screening lanes are closed to individuals enrolled in such program in order to maintain operational efficiency. (f) Vetting for PreCheck participants Not later than 90 days after the date of the enactment of this Act, the Administrator shall initiate an assessment of the security vulnerabilities in the vetting process for the PreCheck program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the PreCheck program.

July 22, 2015 Reported with an amendment, committed to the Committee of the Whole House on the State of the Union, and ordered to be printed

tv_txt: IIB 114th CONGRESS 1st Session H. R. 2843 IN THE SENATE OF THE UNITED STATES July 28, 2015 Received; read twice and referred to the Committee on Commerce, Science, and Transportation AN ACT To require certain improvements in the Transportation Security Administration’s PreCheck expedited screening program, and for other purposes.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) TSA The term TSA means the Transportation Security Administration. 3. Enrollment expansion (a) In general Not later than 90 days after the date of the enactment of this Act, the Administrator shall publish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public’s enrollment access to such program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into such program. (b) Requirements Upon publication of the PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet the TSA PreCheck application enrollment standards described in paragraph (1), make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; (2) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to reduce the number of instances in which passengers need to travel to enrollment centers; (3) ensure that the kiosks, mobile devices, or other mobile enrollment platforms referred to in paragraph (3) are certified as secure and not vulnerable to data breaches; (4) ensure that any biometric and biographic information is collected in a manner which is comparable with the National Institute of Standards and Technology standards and ensures privacy and data security protections, including that applicants’ personally identifiable information is collected, retained, used, and shared in a manner consistent with section 552a of title 5, United States Code (commonly known as Privacy Act of 1974 ), and agency regulations; (5) ensure that an individual who wants to enroll in the PreCheck program and has started an application with a single identification verification at one location will be able to save such individual’s application on any kiosk, personal computer, mobile device, or other mobile enrollment platform and be able to return within a reasonable time to submit a second identification verification; and (6) ensure that any enrollment expansion using a private sector risk assessment instead of a fingerprint-based criminal history records check is determined, by the Secretary of Homeland Security, to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation. (c) Marketing of PreCheck program Upon publication of PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) in accordance with the standards described in paragraph (1) of subsection (a), develop and implement— (A) a process, including an associated timeframe, for approving private sector marketing of the TSA PreCheck program; and (B) a strategy for partnering with the private sector to encourage enrollment in such program; and (2) submit to Congress a report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program under this subsection. (d) Identity verification enhancement Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage Department-held data and technologies to verify the citizenship of individuals enrolling in the TSA PreCheck program; and (2) partner with the private sector to use advanced biometrics and standards comparable with National Institute of Standards and Technology standards to facilitate enrollment in such program. (e) PreCheck lane operation The Administrator shall— (1) ensure that TSA PreCheck screening lanes are open and available during peak and high-volume travel times at airports to individuals enrolled in the PreCheck program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck screening lanes are closed to individuals enrolled in such program in order to maintain operational efficiency. (f) Vetting for PreCheck participants Not later than 90 days after the date of the enactment of this Act, the Administrator shall initiate an assessment of the security vulnerabilities in the vetting process for the PreCheck program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the PreCheck program.

Passed the House of Representatives July 27, 2015. Karen L. Haas, Clerk

tv_txt: I 114th CONGRESS 1st Session H. R. 2843 IN THE HOUSE OF REPRESENTATIVES AN ACT To require certain improvements in the Transportation Security Administration’s PreCheck expedited screening program, and for other purposes.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) TSA The term TSA means the Transportation Security Administration. 3. Enrollment expansion (a) In general Not later than 90 days after the date of the enactment of this Act, the Administrator shall publish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public’s enrollment access to such program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into such program. (b) Requirements Upon publication of the PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet the TSA PreCheck application enrollment standards described in paragraph (1), make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; (2) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to reduce the number of instances in which passengers need to travel to enrollment centers; (3) ensure that the kiosks, mobile devices, or other mobile enrollment platforms referred to in paragraph (3) are certified as secure and not vulnerable to data breaches; (4) ensure that any biometric and biographic information is collected in a manner which is comparable with the National Institute of Standards and Technology standards and ensures privacy and data security protections, including that applicants’ personally identifiable information is collected, retained, used, and shared in a manner consistent with section 552a of title 5, United States Code (commonly known as Privacy Act of 1974 ), and agency regulations; (5) ensure that an individual who wants to enroll in the PreCheck program and has started an application with a single identification verification at one location will be able to save such individual’s application on any kiosk, personal computer, mobile device, or other mobile enrollment platform and be able to return within a reasonable time to submit a second identification verification; and (6) ensure that any enrollment expansion using a private sector risk assessment instead of a fingerprint-based criminal history records check is determined, by the Secretary of Homeland Security, to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation. (c) Marketing of PreCheck program Upon publication of PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) in accordance with the standards described in paragraph (1) of subsection (a), develop and implement— (A) a process, including an associated timeframe, for approving private sector marketing of the TSA PreCheck program; and (B) a strategy for partnering with the private sector to encourage enrollment in such program; and (2) submit to Congress a report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program under this subsection. (d) Identity verification enhancement Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage Department-held data and technologies to verify the citizenship of individuals enrolling in the TSA PreCheck program; and (2) partner with the private sector to use advanced biometrics and standards comparable with National Institute of Standards and Technology standards to facilitate enrollment in such program. (e) PreCheck lane operation The Administrator shall— (1) ensure that TSA PreCheck screening lanes are open and available during peak and high-volume travel times at airports to individuals enrolled in the PreCheck program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck screening lanes are closed to individuals enrolled in such program in order to maintain operational efficiency. (f) Vetting for PreCheck participants Not later than 90 days after the date of the enactment of this Act, the Administrator shall initiate an assessment of the security vulnerabilities in the vetting process for the PreCheck program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the PreCheck program.

Passed the House of Representatives July 27, 2015. Karen L. Haas, Clerk.

tv_txt: II Calendar No. 383 114th CONGRESS 2d Session H. R. 2843 [Report No. 114–223] IN THE SENATE OF THE UNITED STATES July 28, 2015 Received; read twice and referred to the Committee on Commerce, Science, and Transportation March 7, 2016 Reported by Mr. Thune , with an amendment Strike out all after the enacting clause and insert the part printed in italic AN ACT To require certain improvements in the Transportation Security Administration’s PreCheck expedited screening program, and for other purposes.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) TSA The term TSA means the Transportation Security Administration. 3. Enrollment expansion (a) In general Not later than 90 days after the date of the enactment of this Act, the Administrator shall publish PreCheck application enrollment standards to add multiple private sector application capabilities for the TSA PreCheck program to increase the public’s enrollment access to such program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into such program. (b) Requirements Upon publication of the PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) coordinate with interested parties to deploy TSA-approved ready-to-market private sector solutions that meet the TSA PreCheck application enrollment standards described in paragraph (1), make available additional PreCheck enrollment capabilities, and offer secure online and mobile enrollment opportunities; (2) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to reduce the number of instances in which passengers need to travel to enrollment centers; (3) ensure that the kiosks, mobile devices, or other mobile enrollment platforms referred to in paragraph (3) are certified as secure and not vulnerable to data breaches; (4) ensure that any biometric and biographic information is collected in a manner which is comparable with the National Institute of Standards and Technology standards and ensures privacy and data security protections, including that applicants’ personally identifiable information is collected, retained, used, and shared in a manner consistent with section 552a of title 5, United States Code (commonly known as Privacy Act of 1974 ), and agency regulations; (5) ensure that an individual who wants to enroll in the PreCheck program and has started an application with a single identification verification at one location will be able to save such individual’s application on any kiosk, personal computer, mobile device, or other mobile enrollment platform and be able to return within a reasonable time to submit a second identification verification; and (6) ensure that any enrollment expansion using a private sector risk assessment instead of a fingerprint-based criminal history records check is determined, by the Secretary of Homeland Security, to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation. (c) Marketing of PreCheck program Upon publication of PreCheck program application enrollment standards pursuant to subsection (a), the Administrator shall— (1) in accordance with the standards described in paragraph (1) of subsection (a), develop and implement— (A) a process, including an associated timeframe, for approving private sector marketing of the TSA PreCheck program; and (B) a strategy for partnering with the private sector to encourage enrollment in such program; and (2) submit to Congress a report on any PreCheck fees collected in excess of the costs of administering such program, including recommendations for using such amounts to support marketing of such program under this subsection. (d) Identity verification enhancement Not later than 90 days after the date of the enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage Department-held data and technologies to verify the citizenship of individuals enrolling in the TSA PreCheck program; and (2) partner with the private sector to use advanced biometrics and standards comparable with National Institute of Standards and Technology standards to facilitate enrollment in such program. (e) PreCheck lane operation The Administrator shall— (1) ensure that TSA PreCheck screening lanes are open and available during peak and high-volume travel times at airports to individuals enrolled in the PreCheck program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck screening lanes are closed to individuals enrolled in such program in order to maintain operational efficiency. (f) Vetting for PreCheck participants Not later than 90 days after the date of the enactment of this Act, the Administrator shall initiate an assessment of the security vulnerabilities in the vetting process for the PreCheck program that includes an evaluation of whether subjecting PreCheck participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the PreCheck program.

1. Short title This Act may be cited as the TSA PreCheck Expansion Act . 2. Definitions In this Act: (1) Administrator The term Administrator means the Administrator of the Transportation Security Administration. (2) Department The term Department means the Department of Homeland Security. (3) PreCheck Program The term PreCheck Program means the trusted traveler program implemented by the Transportation Security Administration under section 109(a)(3) of the Aviation and Transportation Security Act ( 49 U.S.C. 114 ). (4) TSA The term TSA means the Transportation Security Administration. 3. PreCheck Program authorization The Administrator shall continue to administer the PreCheck Program established under the authority of the Aviation and Transportation Security Act ( Public Law 107–71 ). 4. PreCheck Program enrollment expansion (a) In general Not later than 90 days after the date of enactment of this Act, the Administrator shall publish PreCheck Program enrollment standards that add multiple private sector application capabilities for the PreCheck Program to increase the public’s enrollment access to the program, including standards that allow the use of secure technologies, including online enrollment, kiosks, tablets, or staffed laptop stations at which individuals can apply for entry into the program. (b) Requirements Upon publication of the PreCheck Program enrollment standards under subsection (a), the Administrator shall— (1) coordinate with interested parties— (A) to deploy TSA-approved ready-to-market private sector solutions that meet the PreCheck Program enrollment standards under subsection (a); (B) to make available additional PreCheck Program enrollment capabilities; and (C) to offer secure online and mobile enrollment opportunities; (2) partner with the private sector to collect biographic and biometric identification information via kiosks, mobile devices, or other mobile enrollment platforms to increase enrollment flexibility and minimize the amount of travel to enrollment centers for applicants; (3) ensure that any information, including biographic information, is collected in a manner that— (A) is comparable with the appropriate and applicable standards developed by the National Institute of Standards and Technology; and (B) protects privacy and data security, including that any personally identifiable information is collected, retained, used, and shared in a manner consistent with section 552a of title 5, United States Code (commonly known as Privacy Act of 1974 ), and with agency regulations; (4) ensure that the enrollment process is streamlined and flexible to allow an individual to provide additional information to complete enrollment and verify identity; and (5) ensure that any enrollment expansion using a private sector risk assessment instead of a fingerprint-based criminal history records check is determined, by the Secretary of Homeland Security, to be equivalent to a fingerprint-based criminal history records check conducted through the Federal Bureau of Investigation. (c) Marketing of PreCheck Program Upon publication of PreCheck Program enrollment standards under subsection (a), the Administrator shall— (1) in accordance with those standards, develop and implement— (A) a continual process, including an associated timeframe, for approving private sector marketing of the PreCheck Program; and (B) a long-term strategy for partnering with the private sector to encourage enrollment in such program; (2) submit to Congress, at the end of each fiscal year, a report on any PreCheck Program application fees collected in excess of the costs of administering the program, including to access the feasibility of the program, for the preceding fiscal year; and (3) include in the report under paragraph (2) recommendations for using such amounts to support marketing of the program under this subsection. (d) Identity verification enhancement Not later than 120 days after the date of enactment of this Act, the Administrator shall— (1) coordinate with the heads of appropriate components of the Department to leverage department-held data and technologies to verify the citizenship of individuals enrolling in the PreCheck Program; (2) partner with the private sector to use biometrics and authentication standards, such as relevant standards developed by the National Institute of Standards and Technology, to facilitate enrollment in the program; and (3) consider leveraging the existing resources and abilities of airports to conduct fingerprint and background checks to expedite identity verification. (e) PreCheck Program lanes operation The Administrator shall— (1) ensure that PreCheck Program screening lanes are open and available during peak and high-volume travel times at appropriate airports to individuals enrolled in the PreCheck Program; and (2) make every practicable effort to provide expedited screening at standard screening lanes during times when PreCheck Program screening lanes are closed to individuals enrolled in the program in order to maintain operational efficiency. (f) Vetting for PreCheck Program participants Not later than 90 days after the date of enactment of this Act, the Administrator shall initiate an assessment to identify any security vulnerabilities in the vetting process for the PreCheck Program, including determining whether subjecting PreCheck Program participants to recurrent fingerprint-based criminal history records checks, in addition to recurrent checks against the terrorist watchlist, could be done in a cost-effective manner to strengthen the security of the PreCheck Program.

March 7, 2016 Reported with an amendment