On March 1, Google and Cape Air announced that Cape Air would be migrating its Passenger Name Records (PNR) to a new computerized reservation system (CRS) developed by Google’s ITA Software division. In combination with Google’s controversial new privacy policy, this move could set a potentially dangerous standard for what kinds of information Customs and Border Protections (CBP) and Transportation Security Administration (TSA) may access in determining the fly or no-fly status of travelers.
While most have never seen their PNRs, it is an important assemblage of data that determines whether or not a passenger is permitted to fly. Each individual has his or her own PNR, which are stored with millions of other passengers in CRSs. Governmental agencies then have access to these files and place restrictions on those passengers they deem to be a credible threat to national security.
Google has also made headlines recently regarding its new privacy policy, which Consumer Watchdog reports is a blatant misnomer, and actually describes the new and invasive ways in which Google wants to gather information about individuals’ Internet usage. Many of these techniques include methods for circumventing the privacy policies of Internet browsers such as Microsoft’s Internet Explorer or Apple’s Safari, which is used on iPhones and iPads around the country. This information will then be stored in virtually permanent digital dossiers so that Google can target ads based on individuals’ personal information. Contrary to its name, this new privacy agreement essentially outlines Google’s “spy” policy.
These issues should each individually be enough to concern any person who uses the Internet. However, these two issues combined should raise serious questions about what kind of information Google is including in its CRS, which are then admissible as grounds for CBP and TSA to restrict individuals’ ability to travel.
It is true that as of now the only user for Google’s CRS database is Cape Air, a relatively small airline that flies to only a few destinations in the Caribbean. It is also unclear how Google will use these digital dossiers and how they will be incorporated into its CRS database. However, there is no doubt that Google will seek to expand to include other airlines in the future and as it does so, the potential for government agencies violating individual privacy rights will increase exponentially while legal measures for accountability remain virtually non-existent.
Google’s new CRS system has also raised issues among European privacy advocates who claim that the new policy violates EU law. While Cape Air has included a waiver of certain rights, it is still unclear whether this is a legitimate exception to EU policy. Either way, Google appears to have no intentions of closing their CRS program and the civil rights of individuals will continue to be an important issue.