The United States is poised to significantly tighten border security measures for foreign visitors, potentially requiring detailed personal information, including five years of social media history, biometric data, and family details. The proposed changes, announced by U.S. Customs and Border Protection (CBP), aim to enhance vetting procedures for travelers entering the country, particularly those arriving under the Visa Waiver Program (VWP).
The initiative, first proposed in December 2025, centers on a revamp of the Electronic System for Travel Authorization (ESTA), the online application currently used by citizens of 42 countries to gain entry into the U.S. For tourism or business stays of up to 90 days. The plan envisions a mobile-only application process and a substantial increase in the data collected from applicants.
Under the proposed rules, travelers may be required to submit social media account details spanning the past five years, email addresses used over the last decade, and personal information about immediate family members, including phone numbers and addresses. The collection of social media data is mandatory, according to a notice posted by CBP in the Federal Register. Applicants will also likely be required to upload a selfie as part of the biometric screening process.
The Department of Homeland Security (DHS) is currently soliciting public feedback on the proposed changes. CBP maintains that the overhaul is not a departure from existing practices, but rather a proactive step to bolster national security. “Nothing has changed on this front for those coming to the United States,” a CBP statement reads. “This is not a final rule, This proves simply the first step in starting a discussion to have new policy options to keep the American people safe.”
The move aligns with Executive Order 14161, issued in January 2025, which directed CBP to enhance vetting procedures for individuals applying for travel authorization through the ESTA program. The order specifically called for the collection of additional information from non-U.S. Citizens seeking visa-free entry.
The VWP currently includes a diverse range of countries, encompassing many European nations such as the United Kingdom, Germany, and France, as well as key U.S. Allies like Australia, Israel, Japan, New Zealand, and South Korea. Citizens of these countries typically bypass the lengthy and often complex visa application process, relying instead on ESTA for streamlined entry.
The proposed changes have already sparked concerns about potential privacy violations and the possibility of deterring tourism. Industry observers suggest that the extensive data collection requirements could discourage travelers from visiting the U.S., particularly those who are hesitant to share personal information with government agencies.
The shift to a mobile-only application process is also likely to raise accessibility issues for some travelers, particularly those who may not have access to smartphones or reliable internet connectivity. The CBP has not yet detailed how it will address these concerns.
While the CBP emphasizes the security benefits of the proposed changes, critics argue that the measures are overly intrusive and may not be effective in preventing terrorism or other security threats. They point to the vast amount of publicly available data already accessible to law enforcement agencies and question whether collecting additional information from travelers will significantly enhance security.
The implementation of these new rules could have significant implications for the travel industry, potentially impacting airline revenues, hotel occupancy rates, and tourism-related businesses. The extent of the impact will depend on how the rules are ultimately finalized and how effectively the CBP communicates the changes to travelers.
The proposal comes amid increasing scrutiny of border searches of personal electronic devices. The CBP has the authority to search travelers’ laptops, smartphones, and other devices without a warrant, a practice that has drawn criticism from privacy advocates and civil liberties groups. The new rules could further expand the CBP’s ability to access personal information from travelers.
The timeline for the implementation of the new rules remains uncertain. The CBP is currently reviewing public comments and is expected to issue a final rule in the coming months. Once finalized, the changes will likely be phased in gradually, allowing travelers time to adjust to the new requirements.
The potential for increased scrutiny of social media activity raises questions about how the CBP will analyze the vast amounts of data collected. The agency has not yet disclosed the specific criteria it will use to assess travelers’ social media profiles, raising concerns about potential bias and discrimination.
The proposed changes represent a significant shift in U.S. Border security policy, reflecting a growing emphasis on data-driven vetting procedures. Whether these measures will effectively enhance security without unduly burdening travelers remains to be seen. The travel industry and privacy advocates will be closely watching the development of this policy.
