Alright, reading up it looks like JetBlue sends the photo to US Customs and Border control and then the US government never deletes the photo. The process is opt-out (note that GDPR requires opt-in, afaik)

→ View original post on X — @petitegeek,