CLEAR: Your data will be properly disposed of

CLEAR: Your data will be properly disposed of

Summary: The defunct CLEAR service is attempting to re-assure its former customers that their biometric data will not be divulged or misused.The defunct registered traveler service CLEAR (see previous post) has recently sent out the following communication to its former subscribers, assuring them that their personal biometric data will not be misused:Click on the "Read the rest of this entry link below" for more.

SHARE:
6

Clear Optical Scanner in Use

The defunct CLEAR service is attempting to re-assure its former customers that their biometric data will not be divulged or misused.

The defunct registered traveler service CLEAR (see previous post) has recently sent out the following communication to its former subscribers, assuring them that their personal biometric data will not be misused:

Click on the "Read the rest of this entry link below" for more.

Clear Member Update

Dear Jason Perlow,

In response to questions raised by our members, Clear would like to offer the following information:

Clear Lanes Are No Longer Available.

At 11:00 p.m. PST on June 22, 2009, Clear ceased operations. Clear's parent company, Verified Identity Pass, Inc., was unable to negotiate an agreement with its senior creditor to continue operations. Verified Identity Pass regrets that Clear will not be able to continue operations.

How is Clear securing personal information?

Clear stands by our commitment to protect our customer's personally identifiable information - including fingerprints, iris images, photos, names, addresses, credit card numbers and other personal information provided to us - and to keep the privacy promises that we have made. Information is secured in accordance with the Transportation Security Administration's Security, Privacy and Compliance Standards.

How is Clear securing any information at the airports?

Each hard disk at the airport, including the enrollment and verification kiosks, has now been wiped clean of all data and software. The triple wipe process we used automatically and completely overwrites the contents of the entire disk, including the operating system, the data and the file structure. This process also prevents or thoroughly hinders all known techniques of hard disk forensic analysis.

How is Clear securing any information in central databases and corporate systems?

Lockheed Martin is the lead systems integrator for Clear, and is currently working with Verified Identity Pass, Inc. to ensure an orderly shutdown as the program closes. As Verified Identity Pass, Inc. and the Transportation Security Administration work through this process, Lockheed Martin remains committed to protecting the privacy of individuals' personal information provided for the Clear Registered Traveler program. Lockheed's work will also remain consistent with the Transportation Security Administration's federal requirements and the enhanced security and privacy requirements of Verified Identity Pass, Inc.

The computers that Verified Identity Pass, Inc. assigned to its former corporate employees are being wiped using the same process described for computers at the airports.

Will personally identifiable information be sold?

The personally identifiable information that customers provided to Clear may not be used for any purpose other than a Registered Traveler program operated by a Transportation Security Administration authorized service provider. Any new service provider would need to maintain personally identifiable information in accordance with the Transportation Security Administration's privacy and security requirements for Registered Traveler programs. If the information is not used for a Registered Traveler program, it will be deleted.

How will members be notified when information is deleted?

Clear intends to notify members in a final email message when the information is deleted.

Who is monitoring this process?

Clear is communicating with TSA, airport and airline sponsors, and subcontractors, to ensure that the security of the information and systems is maintained throughout the closure process. Clear thanks these partners for their continuing cooperation and diligence.

How can I contact Clear?

Please visit our website, www.flyclear.com, for the latest updates. Clear's call center and customer support email service are no longer available.

Will I receive a refund for membership in Clear?

At the present time, Verified Identity Pass, Inc. cannot issue refunds due to the company's financial condition.

Has Verified Identity Pass, Inc. filed for bankruptcy?

At the present time, Verified Identity Pass has not commenced any proceedings under the United States Bankruptcy Code.

Clear Customer Service

Clear, 600 Third Avenue 10th Floor, New York, NY 10016 www.flyclear.com

Does this statement by CLEAR finally alleviate any of your lingering concerns about your biometric data they had in their possession? Talk Back and Let Me Know.

Topics: Collaboration, Security

About

Jason Perlow, Sr. Technology Editor at ZDNet, is a technologist with over two decades of experience integrating large heterogeneous multi-vendor computing environments in Fortune 500 companies. Jason is currently a Partner Technology Strategist with Microsoft Corp. His expressed views do not necessarily represent those of his employer.

Kick off your day with ZDNet's daily email newsletter. It's the freshest tech news and opinion, served hot. Get it.

Talkback

6 comments
Log in or register to join the discussion
  • Is the card still usable in other RT programs?

    Preferred Traveler says yes: http://www.jax-vip.com/rtairports.aspx

    FLO is vague: http://www.flocard.com/

    From ~20 sites down to 2 or 3? Ouch.
    MariusSilverwolf
  • Not ENTIRELY comforting

    [i]The triple wipe process we used automatically and completely overwrites the contents of the entire disk, including the operating system, the data and the file structure. This process also prevents or thoroughly hinders all known techniques of hard disk forensic analysis.[/i]

    It would seem to me that, if the best they can guarantee from a triple wipe is to "thoroughly hinder" forensic analysis, would common sense not dictate more passes? Isn't the standard for a "government wipe" seven passes? And since this program was related to the TSA, a government entity, shouldn't they mandate some sort of adherence to a government standard?
    MGP2
    • Physical Data Destruction

      I'm fairly confident they zapped it good, but for good measure you can't beat stacking the drives over a pile of thermite and lighting it on fire. And doing a massive degauss with an industrial car wrecking magnet just prior to that!
      jperlow
      • Wheel grinder..

        Probably the closest thing for shredder that a hard-drive could go through.. remove the platters and grind'er down.

        Although, your approach DOES seem a bit more fun.. :)
        daftkey
      • If other companies can use the data

        Didn't I read that only other security companies can use the data (paraphrasing) after they said the data was destroyed?

        It appears the data is still held at some central location, so it isn't really destroyed except for the remote devices. That really doesn't build my confidence a lot.
        rdhalsteatzd
  • RE: CLEAR: Your data will be properly disposed of

    The ONLY way to guarantee, 100% that ALL traces of data are rendered unreadable (Track expansion, head misalignment leftovers, residuals, etc. is a smelting furnace. The correct 'software based' wiping/overwrite/wipe/etc. process IS good, granted, but I've NEVER seen data recovered from a pile of slag.

    You don't even have to disassemble the drive, just break out the circuit board for gold/copper recycle and toss the rest of the drive into the pool of molten metal.

    It's probably cheaper to melt it down than the labor to wipe and verify the drive plus the cost of a replacement.





    Original Eggman