6 U.S.C. § 563a

(a) Acquisition justification Before the Administration implements any security-related technology acquisition, the Administrator, in accordance with the Department’s policies and directives, shall determine whether the acquisition is justified by conducting an analysis that includes— (1) an identification of the scenarios and level of risk to transportation security from those scenarios that would be addressed by the security-related technology acquisition; (2) an assessment of how the proposed acquisition aligns to the Plan; (3) a comparison of the total expected lifecycle cost against the total expected quantitative and qualitative benefits to transportation security; (4) an analysis of alternative security solutions, including policy or procedure solutions, to determine if the proposed security-related technology acquisition is the most effective and cost-efficient solution based on cost-benefit considerations; (5) an assessment of the potential privacy and civil liberties implications of the proposed acquisition that includes, to the extent practicable, consultation with organizations that advocate for the protection of privacy and civil liberties; (6) a determination that the proposed acquisition is consistent with fair information practice principles issued by the Privacy Officer of the Department; (7) confirmation that there are no significant risks to human health or safety posed by the proposed acquisition; and (8) an estimate of the benefits to commercial aviation passengers. (b) Reports and certification to Congress (1) In general Not later than the end of the 30-day period preceding the award by the Administration of a contract for any security-related technology acquisition exceeding $30,000,000, the Administrator shall submit to the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Homeland Security of the House of Representatives— (A) the results of the comprehensive acquisition justification under subsection (a); and (B) a certification by the Administrator that the benefits to transportation security justify the contract cost. (2) Extension due to imminent terrorist threat If there is a known or suspected imminent threat to transportation security, the Administrator— (A) may reduce the 30-day period under paragraph (1) to 5 days to rapidly respond to the threat; and (B) shall immediately notify the Committee on Commerce, Science, and Transportation of the Senate and the Committee on Homeland Security of the House of Representatives of the known or suspected imminent threat.