AI-Assisted Body Scanners Reportedly Subjected Transgender Travelers to Invasive Body Searches

Airport security body scanners manufactured by L3Harris Technologies use gender-binary algorithms that frequently misidentify transgender and gender-nonconforming travelers as potential threats. This leads to invasive, non-consensual physical pat-downs and, in some reported cases, demands for travelers to expose their genitals to TSA officers. The systemic failure of the technology to accommodate diverse gender identities results in significant psychological trauma and civil rights concerns for affected travelers.

Transportation Security Administration (TSA)'s use of image-processing body scanners at airports led transgender and gender-nonconforming travelers to be subjected to allegedly discriminatory and invasive searches, such as being asked to remove undergarments in private rooms by officers not of their gender.

Source: AI Incident Database

Risk classification

  • Primary risk domain: 1 Discrimination & Toxicity
  • Primary risk subdomain: 1.3 Unequal performance across groups

The L3Harris scanner's accuracy and effectiveness are dependent on group membership, performing poorly for transgender and gender-nonconforming individuals due to its binary algorithmic design.

Additional risk subdomains

  • 7.3 Lack of capability or robustness: The AI system fails to perform reliably under varying conditions, specifically when scanning individuals with non-binary physical characteristics.

Causal factors

  • Entity: AI
  • Intent: Unintentional
  • Timing: Post-deployment

The incident was triggered by the L3Harris scanner's binary algorithm misidentifying transgender anatomy as a threat, which is an unexpected and unintentional outcome of deploying the technology.

EU AI Act risk tier

  • Risk tier: 2 High Risk

High Risk: The AI system is used in a law enforcement and public security context (airport security screening), which has significant implications for safety, fundamental rights, and public interests, specifically leading to civil rights violations and discrimination.

AI system and alleged parties

  • AI system: millimeter wave scanner (L3Harris Technologies)
  • AI purpose: Threat Detection; Identification
  • Behaviour type: Tool
  • Alleged developer: L3Harris Technologies
  • Alleged deployer: Transportation Security Administration
  • Alleged harmed parties: transgender travelers, gender-nonconforming travelers

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Minor. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

  • Physical: direct Negligible, indirect Negligible
  • Infrastructure: direct Negligible, indirect Negligible
  • Property: direct Negligible, indirect Negligible
  • Financial: direct Negligible, indirect Negligible
  • Environmental: direct Negligible, indirect Negligible
  • Malicious content: direct Negligible, indirect Negligible
  • Differential treatment: direct Minor, indirect Substantial
  • Civil rights: direct Minor, indirect Substantial
  • Democracy: direct Negligible, indirect Negligible
  • Privacy: direct Minor, indirect Minor
  • Psychological: direct Minor, indirect Minor
  • Epistemic: direct Negligible, indirect Negligible
  • Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Differential treatment

Reported: The report explicitly describes systemic differential treatment of transgender and gender-nonconforming individuals.

Directly caused: The L3Harris scanner's binary algorithm requires operators to select male or female, leading to disproportionate false alarms and invasive searches for transgender individuals whose anatomy does not match binary expectations.

Indirectly caused: Transgender travelers face significantly higher rates of security scrutiny, representing 5% of civil rights complaints despite being less than 1% of the population, and 43% of trans travelers reporting checkpoint issues in a national survey.

Inferred additional harm: Widespread differential treatment likely affects thousands of transgender, gender-nonconforming, and intersex travelers daily across US airports due to the systemic binary design of the scanners.

Civil rights

Reported: The report explicitly describes violations of civil rights and personal dignity caused directly and indirectly by the incident.

Directly caused: The AI-driven scanning process resulted in travelers being subjected to highly invasive pat-downs and, in some cases, being pressured to expose their genitals to TSA officers to clear security.

Indirectly caused: The systemic failure of the technology and TSA procedures violated travelers' rights to equal treatment and freedom from unreasonable searches, leading to hundreds of official civil rights complaints.

Inferred additional harm: It is likely that many more civil rights violations occurred but went unreported due to victims' fear of outing themselves or reliving the trauma.

Privacy

Reported: The report explicitly describes severe violations of physical and bodily privacy caused directly and indirectly by the incident.

Directly caused: The AI system's false alarms led to TSA officers conducting highly invasive physical searches, including touching groin areas and breasts, and requiring travelers to adjust clothing or expose genitals in private rooms.

Indirectly caused: The design of the millimeter wave scanners and the lack of non-binary options forced travelers to disclose sensitive personal information about their transgender status and anatomy to security personnel.

Inferred additional harm: Thousands of travelers likely had their bodily privacy compromised during invasive secondary screenings triggered by the binary algorithm's limitations.

Psychological

Reported: The report explicitly describes severe psychological distress, anxiety, and trauma caused directly and indirectly by the incident.

Directly caused: The scanner's false alarms directly led to highly invasive searches that caused immediate humiliation, crying, and acute distress for travelers like [PERSON_001], Terra Fox, and Allister McGuire.

Indirectly caused: Affected individuals suffered long-term psychological trauma, including panic attacks when approaching airport checkpoints, avoidance of air travel for years, and the need for anxiety medication.

Inferred additional harm: It is highly likely that thousands of other transgender and gender-nonconforming travelers have experienced similar psychological distress and trauma due to scanner-induced false alarms.

People affected

  • Occurrences reported: 1
  • People reportedly harmed: 458
  • People reportedly exposed: 458

Potential causes

Management

  • Inadequate Risk Assessment: TSA failed to address known scanner bias and discrimination issues.
  • High Employee Attrition: High staff turnover undermines consistent training on sensitive screening.

Technology

  • Binary Algorithmic Design: The scanner is programmed to expect binary male or female anatomy.
  • Inflexible Threat Detection: Algorithm flags non-conforming body parts as potential threats.

Data Inputs

  • Manual Gender Selection: Operator must manually input binary gender before scanning.
  • Limited Anatomical Templates: The system lacks training data representing diverse body types.

Human Factors

  • Inadequate Operator Training: TSA officers lack sufficient training to handle scanner alarms respectfully.
  • Visual Gender Profiling: Operators make split-second gender assumptions based on appearance.

Process and Methods

  • Flawed Screening SOPs: Standard procedures rely on invasive pat-downs for false alarms.
  • Lack of Public Feedback: The technology was implemented without early public comment or review.

Regulatory Environment

  • Lack of Inclusive Standards: No regulatory requirements for scanners to accommodate all gender identities.

Information quality

  • Classification confidence: High
  • Reason for confidence: The report is highly detailed, co-published by ProPublica and the Miami Herald, and relies on official TSA complaint data, a survey of 174 individuals, and direct interviews with multiple affected travelers and former TSA administrators. The role of the L3Harris scanner's binary algorithm is clearly explained.
  • Ambiguities identified: The exact technical specifications of the L3Harris algorithm are proprietary and confidential, meaning the precise mathematical threshold for triggering an alarm is not fully detailed.
  • Alternative interpretations: One could argue the primary failure lies in TSA's human training and standard operating procedures rather than the AI system itself, though the report clearly establishes that the binary design of the algorithm is the root trigger for the false alarms.

The deployment of L3Harris airport security scanners with binary-gendered algorithms has led to systemic false alarms and invasive searches for transgender travelers. While raising significant civil rights and privacy concerns within the United States, the national security impact remains minor, representing a localized procedural and civil liberties issue rather than a threat to state sovereignty or physical security.

  • Overall national security impact: Minor
  • Scope: Single nation
  • Primary target: United States
  • Alleged perpetrator: Unknown

Threat characteristics

  • Imminence: Long-term. Represents an ongoing, systemic technological issue rather than an active, fast-moving crisis.
  • Autonomy: Human-supervised. The AI scanner acts as a decision-support tool, flagging anomalies, but human TSA officers execute the physical searches and final clearance.
  • Novelty: Established threat. Algorithmic bias and unequal performance across demographic groups are well-documented, established issues in AI deployment.

Impact by dimension

  • Physical security: Negligible. The incident involves airport security screening procedures but does not represent a kinetic threat, compromise of control systems, or mass casualty potential.
  • Information security: Negligible. No intelligence compromise, classified data theft, or information warfare operations are indicated.
  • Sovereignty: Minor. Affects TSA operations, a government function, due to technological limitations, but does not threaten state authority or core constitutional processes.
  • Economic security: Negligible. No strategic technology theft, financial system attacks, or loss of strategic AI competitive advantage are indicated.
  • Societal stability: Minor. Systemic algorithmic bias causes disproportionate false alarms, leading to invasive searches and civil rights concerns for transgender travelers, representing a localized civil liberties issue.
Explore in the interactive Incident Tracker