PolicyBrief
H.R. 7124
119th CongressJan 15th 2026
Realigning Mobile Phone Biometrics for American Privacy Protection Act
IN COMMITTEE

This bill restricts the Department of Homeland Security's use and sharing of specific facial recognition mobile applications to only identifying individuals at ports of entry and mandates the destruction of captured U.S. citizen biometric data.

Bennie Thompson
D

Bennie Thompson

Representative

MS-2

LEGISLATION

New Bill Curbs DHS Facial Recognition Use: Data Destruction Mandated Within 12 Hours

Alright, let's talk about something that hits close to home for anyone who's ever used a smartphone: your face. This new piece of legislation, officially dubbed the Realigning Mobile Phone Biometrics for American Privacy Protection Act, is all about putting some serious fences around how the Department of Homeland Security (DHS) can use specific facial recognition apps on mobile phones. The big takeaway? These apps—think 'Mobile Fortify' and 'Mobile Identify' (or whatever they come up with next)—are now strictly for identifying folks at ports of entry, and nowhere else. DHS also can't share these tools with any other federal, state, local, or tribal agency. They’ve got 30 days from when this bill passes to get their act together and set up the rules, including how to yank these apps off systems where they don't belong.

Keeping Your Face Your Own

So, what does this mean for your digital privacy? A lot, actually. The bill is pretty clear: if DHS used these apps to snag an image, photo, or fingerprint of a U.S. citizen, that data has to be destroyed. And we're not talking about a casual delete; if it was collected before these new rules kick in, it's gotta go immediately. For any data collected at a port of entry after the rules are active, DHS has a tight 12-hour window to wipe it from their systems. This is a pretty significant move to prevent your biometric data from hanging around indefinitely or being used for purposes you didn't sign up for. It’s like a digital shredder for your face, ensuring that sensitive information doesn't just sit in some database waiting for a breach or misuse. For anyone who's ever worried about their digital footprint, this is a step towards a smaller one.

App Lockdown: No Sharing, No Straying

Beyond just data destruction, this bill also puts a serious leash on the apps themselves. Section 2 explicitly states that DHS components are forbidden from sharing these specific facial recognition applications with any other federal, state, local, tribal, or territorial agency. Imagine DHS handing out an app that scans faces to your local police department—that's exactly what this bill aims to prevent. Furthermore, the standards mandated by this act require DHS to remove these applications from all their information technology systems, unless they're absolutely necessary for identification at a port of entry. And here's a kicker: if one of these apps somehow ends up downloaded onto a non-DHS device, the department is required to remotely disable it. This means less chance of these powerful tools ending up in unauthorized hands or being used outside their intended, very narrow scope. It’s about ensuring these high-tech tools stay in their lane and don't become a free-for-all across various government bodies.