"The TSA also proposes to collect and store data on "individuals who are deemed to pose a possible risk to transportation or national security." If a person is determined to be a "risk" under this opaque (and possibly arbitrary and/or discriminatory) procedure, the data will be stored for 50 years. The TSA, to date, has provided absolutely no information about how a passenger is determined to be a "possible risk to transportation or national security." Indeed, one could argue that simply purchasing a ticket makes an individual a "possible" risk to transportation. TSA also gives no information about how such a person might become aware of his or her categorization, and how that categorization might be legally challenged."

More analysis follows.
http://www.epic.org/privacy/airtravel/tsacomments2.24.2003.html