(a) Request for information. (1) Each covered aircraft operator must request the full name, gender, date of birth, and Redress Number for passengers on a covered flight and non-traveling individuals seeking access to an airport sterile area. For reservations made 72 hours prior to the scheduled time of departure for each covered flight, the covered aircraft operator must collect full name, gender, and date of birth for each passenger when the reservation is made or at a time no later than 72 hours prior to the scheduled time of departure of the covered flight. For an individual that makes a reservation for a covered flight within 72 hours of the scheduled time of departure for the covered flight, the covered aircraft operator must collect the individual's full name, date of birth, and gender at the time of reservation. The covered aircraft operator must include the information provided by the individual in response to this request in the SFPD.

(i) Except as provided in paragraph (a)(1)(ii) of this section, each covered aircraft operator must begin requesting the information described in paragraph (a)(1) of this section in accordance with its AOIP as approved by TSA.

(ii) An aircraft operator that becomes a covered aircraft operator after the effective date of this part must begin requesting the information on the date it becomes a covered aircraft operator.

(2) Beginning on a date no later than 30 days after being notified in writing by TSA, each covered aircraft operator must additionally request the Known Traveler Number for passengers on a covered flight and non-traveling individuals seeking access to an airport sterile area. The covered aircraft operator must include the Known Traveler Number provided by the passenger in response to this request in the SFPD.

(3) Each covered aircraft operator may not submit SFPD for any passenger on a covered flight who does not provide a full name, date of birth and gender. Each covered aircraft operator may not accept a request for authorization to enter a sterile area from a non-traveling individual who does not provide a full name, date of birth and gender.

(4) Each covered aircraft operator must ensure that each third party that accepts a reservation, or accepts a request for authorization to enter a sterile area, on the covered aircraft operator's behalf complies with the requirements of this section.

(5) If the covered aircraft operator also has an operation of an aircraft that is subject to 49 CFR 1544.101(b) through (i), the covered aircraft operator may submit SFPD for passengers on these operations for watch list matching under this part, provided that the covered aircraft operator—

(i) Collects and transmits the SFPD for the passengers in accordance with this section;

(ii) Provides the privacy notice to the passengers in accordance with 49 CFR 1560.103; and

(iii) Complies with the requirements of 49 CFR 1560.105 and 1560.107.

(b) Transmission of Secure Flight Passenger Data to TSA. Beginning on the date provided in a covered aircraft operator's AOIP, the covered aircraft operator must electronically transmit SFPD to TSA, prior to the scheduled departure of each covered flight, in accordance with its AOIP as approved by TSA.

(1) To the extent available, each covered aircraft operator must electronically transmit SFPD to TSA for each passenger on a covered flight.

(2) Each covered aircraft operator must transmit SFPD to TSA prior to the scheduled flight departure time, in accordance with its AOIP as approved by TSA.

(c) Transmission of non-traveler information to TSA. Beginning on the date provided in a covered aircraft operator's AOIP, the covered aircraft operator must electronically transmit SFPD to TSA for each non-traveling individual, prior to authorizing access to an airport sterile area.

(d) Retransmission of information. Each covered aircraft operator must retransmit to TSA updates to the information listed in paragraphs (b) and (c) of this section to reflect most recent changes to that information, as specified in its AOIP as approved by TSA.

(a) Electronic collection of information—(1) Current electronic collection of information. Prior to collecting information through a Web site or self-service kiosk from a passenger or non-traveling individual in order to comply with § 1560.101(a), a covered aircraft operator must make available the complete privacy notice set forth in paragraph (b) of this section.

(2) Other electronic collection of information. If a covered aircraft operator collects information directly from a passenger or non-traveling individual in order to comply with § 1560.101(a) through an electronic means not described in paragraph (a)(1) of this section, the covered aircraft operator must make available the complete privacy notice set forth in paragraph (b) of this section.

(3) Third party Web site. Each covered aircraft operator must ensure that each third party that maintains a Web site capable of making a reservation for the covered aircraft operator's reservation system, make available on its Web site the complete privacy notice set forth in paragraph (b) of this section prior to collecting information through the Web site.

(b) Privacy notice. The covered aircraft operator may substitute its name for the word “us,” but the complete privacy notice otherwise must be identical to the following paragraph unless TSA has approved alternative language:

(a) Applicability. (1) This section applies to each covered aircraft operator beginning on the date that TSA assumes the watch list matching function for the passengers and non-traveling individuals to whom that covered aircraft operator issues a boarding pass or other authorization to enter a sterile area. TSA will provide prior written notification to the covered aircraft operator no later than 60 days before the date on which it will assume the watch list matching function from that covered aircraft operator.

(2) Prior to the date that TSA assumes the watch list matching function from a covered aircraft operator, the covered aircraft operator must comply with existing watch list matching procedures for passengers and non-traveling individuals, including denial of transport or sterile area access or designation for enhanced screening for individuals identified by the covered aircraft operator or TSA.

(b) Watch list matching results. Except as provided in paragraph (b) of this section, a covered aircraft operator must not issue a boarding pass or other authorization to enter a sterile area to a passenger or a non-traveling individual, and must not allow that individual to board an aircraft or enter a sterile area, until TSA informs the covered aircraft operator of the results of watch list matching for that passenger or non-traveling individual, in response to the covered aircraft operator's most recent SFPD submission for that passenger or non-traveling individual.

(1) Denial of boarding pass. If TSA sends a covered aircraft operator a boarding pass printing result that says the passenger or non-traveling individual must be placed on inhibited status, the covered aircraft operator must not issue a boarding pass or other authorization to enter a sterile area to that individual and must not allow that individual to board an aircraft or enter a sterile area.

(2) Selection for enhanced screening. If TSA sends a covered aircraft operator a boarding pass printing result that says the passenger has been selected for enhanced screening at a security checkpoint, the covered aircraft operator may issue a boarding pass to that individual and must identify the individual for enhanced screening, in accordance with procedures approved by TSA. The covered aircraft operator must place a code on the boarding pass that meets the requirements described in the Consolidated User Guide. If TSA sends a covered aircraft operator a boarding pass printing result that says the non-traveling individual has been selected for enhanced screening at a security checkpoint, the covered aircraft operator must not issue an authorization to enter a sterile area to that individual.

(3) Cleared for boarding or entry into a sterile area. If TSA sends a covered aircraft operator a boarding pass printing result that instructs a covered aircraft operator that a passenger or non-traveling individual is cleared, the covered aircraft operator may issue a boarding pass or other authorization to enter a sterile area to that individual, unless required under another TSA requirement to identify the passenger or non-traveling individual for enhanced screening or to deny entry into the sterile area. The covered aircraft operator must place a code on the boarding pass or authorization to enter the sterile area that meets the requirements described in the Consolidated User Guide.

(4) Override by a covered aircraft operator. No covered aircraft operator may override a TSA boarding pass printing result that instructs a covered aircraft operator to place a passenger or non-traveling individual in an inhibited status or to identify a passenger or non-traveling individual for enhanced screening, unless explicitly authorized by TSA to do so.

(5) Updated SFPD from covered aircraft operator. When a covered aircraft operator sends updated SFPD to TSA under § 1560.101(d) for a passenger or non-traveling individual for whom TSA has already issued a boarding pass printing result, all previous TSA results concerning the passenger or non-traveling individual are voided. The covered aircraft operator may not issue a boarding pass or grant authorization to enter a sterile area until it receives an updated result from TSA authorizing the issuance of a boarding pass or authorization to enter a sterile area. Upon receiving an updated result from TSA, the covered aircraft operator must acknowledge receipt of the updated result, comply with the updated result, and disregard all previous boarding pass printing results.

(6) Updated boarding pass printing results from TSA. After TSA sends a covered aircraft operator a result under paragraph (b)(1), (b)(2), or (b)(3) of this section, TSA may receive additional information concerning the passenger or non-traveling individual and may send an updated boarding pass printing result concerning that passenger or non-traveling individual to the covered aircraft operator. Upon receiving an updated boarding pass printing result from TSA, the covered aircraft operator must acknowledge receipt of the updated result, comply with the updated result, and disregard all previous results.

(7) Boarding pass issuance for covered flights to or overflying the United States. Covered aircraft operators may permit another aircraft operator to issue a boarding pass for a covered flight departing from a foreign location to the United States or overflying the United States without regard to the requirements in paragraphs (b)(1) through (b)(6) of this section provided that—

(i) Before allowing the individual to board the aircraft for a covered flight, the covered aircraft operator confirms that it has received a boarding pass printing result from DHS for individuals who are issued boarding passes under paragraph (b)(7) of this section;

(ii) Before allowing the individual to board an aircraft for a covered flight, the covered aircraft operator applies the measures in its security program to prevent an individual for whom DHS has returned an inhibited status boarding pass printing result under paragraph (b)(1) of this section from boarding the aircraft; and

(iii) The covered aircraft operator applies the measures in its security program, as provided in 49 CFR part 1544, subpart B or 49 CFR part 1546, subpart B, to ensure that an individual for whom DHS returns a Selectee result under paragraph (b)(2) of this section undergoes enhanced screening pursuant to the covered aircraft operator's security program prior to that individual boarding the aircraft.

(c) Request for identification—(1) In general. If TSA has not informed the covered aircraft operator of the results of watch list matching for an individual by the time the individual attempts to check in, or informs the covered aircraft operator that an individual has been placed in inhibited status, the aircraft operator must request from the individual a verifying identity document pursuant to procedures in its security program., as provided in 49 CFR part 1544, subpart B or 49 CFR part 1546, subpart B. The individual must present a verifying identity document to the covered aircraft operator at the airport.

(2) Transmission of Updated Secure Flight Passenger Data. Upon reviewing a passenger's verifying identity document, the covered aircraft operator must transmit the SFPD elements from the individual's verifying identity document to TSA.

(3) Provision of Passenger Resolution Information. If requested by TSA, the covered aircraft operator must also provide to TSA the individual's Passenger Resolution Information as specified by TSA.

(4) Exception for minors. If a covered aircraft operator is required to obtain information from an individual's verifying identity document under this paragraph (c), and the individual is younger than 18 years of age and does not have a verifying identity document, TSA may, on a case-by-case basis, authorize the minor or an adult accompanying the minor to state the individual's full name and date of birth in lieu of providing a verifying identity document.

(d) Failure to obtain identification. If a passenger or non-traveling individual does not present a verifying identity document when requested by the covered aircraft operator, in order to comply with paragraph (c) of this section, the covered aircraft operator must not issue a boarding pass or give authorization to enter a sterile area to that individual and must not allow that individual to board an aircraft or enter a sterile area, unless otherwise authorized by TSA.

A covered aircraft operator must not use any watch list matching results provided by TSA for purposes other than those provided in § 1560.105 and other security purposes.

(a) Content of the Aircraft Operator Implementation Plan (AOIP). Each covered aircraft operator must adopt and carry out an AOIP that sets forth the following:

(1) The covered aircraft operator's test plan with TSA.

(2) When the covered operator will begin to collect and transmit to TSA each data element of the SFPD for each covered flight.

(3) The specific means by which the covered aircraft operator will request and transmit information under § 1560.101, the timing and frequency of transmission, and any other related matters, in accordance with the Consolidated User Guide.

(b) Adoption of Aircraft Operator Implementation Plan (AOIP). Each covered aircraft operator must adopt an AOIP pursuant to the procedures set forth in this paragraph (b).

(1) TSA notifies each covered aircraft operator in writing of a proposed AOIP, fixing a period of not less than 30 days within which the covered aircraft operator may submit written information, views, and arguments on the proposed AOIP.

(2) After considering all relevant material, TSA's designated official notifies each covered aircraft operator of its AOIP. The AOIP becomes effective not less than 30 days after the covered aircraft operator receives the notice of its AOIP, unless the covered aircraft operator petitions the Assistant Secretary or designated official to reconsider no later than 15 days before the effective date of the AOIP. The covered aircraft operator must send the petition for reconsideration to the designated official. A timely petition for reconsideration stays the effective date of the AOIP.

(3) Upon receipt of a petition for reconsideration, the designated official either amends the AOIP or transmits the petition, together with any pertinent information, to the Assistant Secretary or designee for reconsideration. The Assistant Secretary or designee disposes of the petition within 30 days of receipt by either directing the designated official to withdraw or amend the AOIP, or by affirming the AOIP.

(4) TSA may, at its discretion, grant extensions to any schedule deadlines, on its own initiative or upon the request of a covered aircraft operator.

(c) Incorporation into Security Program. Once an AOIP is approved, the AOIP becomes part of the covered aircraft operator's security program as described in 49 CFR part 1544, subpart B, or 49 CFR part 1546, subpart B, as appropriate, and any amendments will be made in accordance with the procedures in those subparts.

(d) Handling of Aircraft Operator Implementation Plan (AOIP). An AOIP contains sensitive security information (SSI) and must be handled and protected in accordance with 49 CFR part 1520.

(a) Applicability. This section applies to a covered airport operator that has a program approved by TSA through which the covered airport operator may authorize non-traveling individuals to enter a sterile area.

(b) Requirements. A covered airport operator must adopt and carry out an AOIP in accordance with § 1560.109. Each covered airport operator must comply with the procedures required of covered aircraft operators in §§ 1560.101(a), (c), and (d), 1560.103, and 1560.107 of this part and any other applicable TSA requirements when authorizing non-traveling individuals to enter a sterile area.