CBP One App Receives Privacy Impact Assessment
The Department of Homeland Security (DHS) released a Privacy Impact Assessment of CBP One™, a mobile app launched by Customs and Border Protection (CBP) that provides the public a single portal to a variety of CBP services. The app is meant to streamline services for travelers, importers, brokers, airlines, and international organizations by asking them a series of questions that determine the correct services, forms, or applications to meet their needs. CBP maintains that the app increases transparency at CBP and streamlines the process for foreign travelers without sacrificing security.
Diane J. Sabatino, Deputy Executive Assistant Commissioner of Field Operations at U.S. Customs and Border Protection, explained, “CBP has performed a comprehensive review of its services to determine how we can successfully leverage emerging technology to add an extra layer of security and efficiency while supporting the travel recovery efforts.”
In order to use the app, travelers and stakeholders alike will have to input sensitive information such as personally identifiable information and passenger statements. Furthermore, the app will also be used by international organizations working on behalf of people in the Migrant Protection Protocols program who would need to upload biometric data.
Since it is a data collection tool, CBP One™ is exposed to privacy risks. For example, the app has a geolocation tool could be used by CBP to surveil users. The Privacy Impact Assessment addresses this risk by stating that the user is only tracked while entering or leaving the country- not for the duration of their stay.
The Privacy Impact Assessment reads, “The GPS ping is only collected at the exact time the user pushes the submit button and is used to confirm the traveler’s device is in some cases inside a certain CBP-defined radius or outside the United States.”
Another potential risk identified by the assessment is that of people sharing false information about themselves or others, whether intentionally or unintentionally. CBP says this risk is fully mitigated by verifying biographical data when necessary.
The assessment states, “It is unlikely that a user will submit inaccurate information … about another person. Primarily, because there is no benefit in submitting inaccurate information through CBP One.” CBP plans to expand usage to aircraft operators, bus operators, seaplane pilots, commercial truck drivers, and vessel operators in the future.
CBP One™ Mobile App is available in the Apple App Store and Google Play. Travelers can download the free CBP One™ app on their web-enabled smart device and must create a login.gov account to access the services. Travelers who already have a login.gov account should sign into their existing account. More information can be found here.