Security Policy Alert: TSA to Begin Sending Record Delete Notifications
February 22, 2022
The Transportation Security Administration has developed a new 'delete notification' that will be used to notify Designated Aviation Channelers (DACs)'”and subsequently, the Airport or Aircraft Operators'”that a specified aviation worker case is being marked for deletion. These new notifications will begin today, February 22, 2022, and TSA has posted this information on HSIN.
Delete notifications will be sent for the following two scenarios:
1. Pending Delete Notification '“ Case has reached a condition to be deleted from the system and is pending delete for one of the following reasons:
a. Case has no active badges
b. Case has had no updates for a period of time longer than the security threat assessment (STA) validity period (2 years for populations not enrolled in Rap Back)
2. Delete Notification '“ Airport or Aircraft Operator has submitted a delete request through their DAC '“ delete notification is sent to convey that the delete transaction request has been completed 30 days after TSA receives the delete request
Pending Delete notifications will include a delete date element, which specifies the date by which TSA will need to receive an update on the case before it is scheduled for deletion. This date will be 30 days after the Pending Delete notification is sent. Delete notifications may be received as single transactions or in batches of multiple transactions, and for latent or expired cases.
Initial Delete Notifications:
TSA has identified an initial bulk set of cases that satisfy the conditions for delete notifications to be sent. TSA plans to begin submitting batches of delete notifications to clear this backlog starting the week of February 22, 2022. In an effort to ensure minimal impact to the DAC systems, TSA has worked with both DACs to identify the appropriate number of notifications to be sent per batch and the desired time of day to send the batches.
What This Means to Airport and Aircraft Operators:
Your organization will initially begin receiving delete notifications the week of February 22, 2022. Please note, there will be an initial surge of delete notifications for approximately two (2) months as TSA processes the initial bulk batches of delete notifications. After the initial batches are complete, the number of delete notifications being sent from TSA is expected to decrease to a stable volume per day.
If your organization has received a delete notification that is not in response to a case for which you have requested deletion, there are two options for action:
1. If the applicant is indeed no longer active, note the delete date and mark the case to be deleted no earlier than the delete date in your system. This applies to DAC systems and Airport or Aircraft Operator systems. Note: For Airport Operators utilizing a third-party Identity Management System (IDMS), the Airport Operator must ensure reconciliation with the IDMS.
2. If the case being marked for deletion should remain active, please ensure there is at least one active badge tied to the case. If the applicant should still be in the active population, Airport or Aircraft Operators must submit an Update Biographic transaction containing the active badge identifier to reactivate the case.
For additional questions or support from TSA, or if a delete notification(s) was incorrectly received, please submit inquiries to aviation.workers@tsa.dhs.gov .
The Transportation Security Administration has developed a new 'delete notification' that will be used to notify Designated Aviation Channelers (DACs)'”and subsequently, the Airport or Aircraft Operators'”that a specified aviation worker case is being marked for deletion. These new notifications will begin today, February 22, 2022, and TSA has posted this information on HSIN.
Delete notifications will be sent for the following two scenarios:
1. Pending Delete Notification '“ Case has reached a condition to be deleted from the system and is pending delete for one of the following reasons:
a. Case has no active badges
b. Case has had no updates for a period of time longer than the security threat assessment (STA) validity period (2 years for populations not enrolled in Rap Back)
2. Delete Notification '“ Airport or Aircraft Operator has submitted a delete request through their DAC '“ delete notification is sent to convey that the delete transaction request has been completed 30 days after TSA receives the delete request
Pending Delete notifications will include a delete date element, which specifies the date by which TSA will need to receive an update on the case before it is scheduled for deletion. This date will be 30 days after the Pending Delete notification is sent. Delete notifications may be received as single transactions or in batches of multiple transactions, and for latent or expired cases.
Initial Delete Notifications:
TSA has identified an initial bulk set of cases that satisfy the conditions for delete notifications to be sent. TSA plans to begin submitting batches of delete notifications to clear this backlog starting the week of February 22, 2022. In an effort to ensure minimal impact to the DAC systems, TSA has worked with both DACs to identify the appropriate number of notifications to be sent per batch and the desired time of day to send the batches.
What This Means to Airport and Aircraft Operators:
Your organization will initially begin receiving delete notifications the week of February 22, 2022. Please note, there will be an initial surge of delete notifications for approximately two (2) months as TSA processes the initial bulk batches of delete notifications. After the initial batches are complete, the number of delete notifications being sent from TSA is expected to decrease to a stable volume per day.
If your organization has received a delete notification that is not in response to a case for which you have requested deletion, there are two options for action:
1. If the applicant is indeed no longer active, note the delete date and mark the case to be deleted no earlier than the delete date in your system. This applies to DAC systems and Airport or Aircraft Operator systems. Note: For Airport Operators utilizing a third-party Identity Management System (IDMS), the Airport Operator must ensure reconciliation with the IDMS.
2. If the case being marked for deletion should remain active, please ensure there is at least one active badge tied to the case. If the applicant should still be in the active population, Airport or Aircraft Operators must submit an Update Biographic transaction containing the active badge identifier to reactivate the case.
For additional questions or support from TSA, or if a delete notification(s) was incorrectly received, please submit inquiries to aviation.workers@tsa.dhs.gov .
