49 CFR §1542.221

1. (a)Each airport operator must ensure that—
   1. (1)A record is made of each law enforcement action taken in furtherance of this part; and
   2. (2)The record is maintained for a minimum of 180 days.
2. (b)Data developed in response to paragraph (a) of this section must include at least the following, except as authorized by TSA:
   1. (1)The number and type of weapons, explosives, or incendiaries discovered during any passenger-screening process, and the method of detection of each.
   2. (2)The number of acts and attempted acts of aircraft piracy.
   3. (3)The number of bomb threats received, real and simulated bombs found, and actual detonations on the airport.
   4. (4)The number of arrests, including—
      1. (i)Name, address, and the immediate disposition of each individual arrested;
      2. (ii)Type of weapon, explosive, or incendiary confiscated, as appropriate; and
      3. (iii)Identification of the aircraft operators or foreign air carriers on which the individual arrested was, or was scheduled to be, a passenger or which screened that individual, as appropriate.