Cory Doctorow's open letter to American Airlines about his recent experience with airport security at Heathrow is worth reading. Here's an excerpt:
It's of course possible it's not really a TSA rule at all; although I wouldn't be a bit surprised if it's something special rolled out for the
Thing is, though, if they are doing this in the UK, they face a populace with actual rights:
Under the UK Data Protection Act, AA is required to be accountable for the personal information it collects from the public. On presentation of a nominal fee of ten pounds, AA is expected to provide a reasonable accounting of what information it has gathered from me and how it uses that information. I believe gathering these dossiers means that you incur this liability not only to me, but to all of my friends, too — in other words, if you require me to give you my friends' name and address, my friends also have the right to find out how you use that information. This explodes your data-retention liability, potentially by an order of magnitude.