America’s Homeland Security Department is breaking the law by not telling the public how personal information is used to screen international travellers, government investigators say.