United States Shockingly Reverses Controversial ESTA Social Media Rule After Massive Global Outcry, CBP Set to Reveal Fall 2026 Revisions That Could Change How Tourists Enter the Country Forever

Written By: Hrittik Shaw

Hrittik Shaw

Bio-Hrittik Shaw is a travel news writer with a passion for uncovering global tourism trends, aviation developments, destination insights, and hospitality innovations. He specialises in producing well-researched, data-driven, and engaging reports that simplify complex travel industry developments for a global audience. His work focuses on tourism policies, airline news, sustainable travel, infrastructure, emerging destinations, and international travel trends, helping readers stay informed about the rapidly evolving world of travel.

See Full Bio

May 24, 2026 6:29 PM

Image generated with Ai

In a significant turn of events, United States Customs and Border Protection (CBP) is now signalling a major shift in its controversial proposal to require travellers to disclose detailed social media histories before entering the United States under the Electronic System for Travel Authorization (ESTA). The initial proposal, published in the Federal Register in December 2025, faced intense public scrutiny from privacy advocates, international travellers and industry stakeholders — prompting CBP to consider serious revisions that may soften the rule and temper its reach.

What the Original Proposal Entailed

Under existing ESTA protocols managed by CBP and part of the U.S. Department of Homeland Security (DHS), travellers from Visa Waiver Program (VWP) countries — including nations such as the United Kingdom, Germany, Japan, Australia and others — can enter the U.S. for tourism or business without a visa for up to 90 days by completing a short online travel authorization form.

However, in late 2025 CBP unveiled a sweeping draft plan that would expand this form to include mandatory disclosure of all social media handles and accounts used over the past five years. The proposal also aimed to collect extensive contact information, email histories extending a decade back, and additional details about family and identifiers.

Officials said the expanded data collection was intended to enhance identity verification, detect fraudulent applications and bolster national security protections. But critics immediately raised concerns that without clear privacy safeguards, such requirements could breach personal privacy and represent an unreasonable intrusion into travellers’ personal lives.

Public Outcry and Privacy Concerns

Shortly after the proposal was published, travel organisations, civil liberties groups, and international tourism sectors pushed back sharply. The U.S. Travel Association warned that mandatory social media disclosure could deter millions of visitors and negatively impact U.S. inbound travel, particularly when paired with other stricter vetting requirements.

The proposal was opened for public comment as required under the Paperwork Reduction Act (PRA), which mandates that new data collection measures be publicly reviewed before they can be enacted. During this comment period, stakeholders highlighted numerous issues, including privacy rights, disproportionate burden on travellers, and a lack of evidence that deeper social media screening would proportionally improve security outcomes.

One industry legal analysis noted that although stronger vetting mechanisms can support fraud detection, the link between online data extraction and enhanced border security remains weakly justified without better safeguards and transparency.

Shift in CBP Strategy — Softening the Proposal

Most recently, official sources indicate that CBP is now reevaluating the scope of the original rule, which had been interpreted by some as applying across the board to all visa‑free travellers. According to travel policy observers, CBP is looking to “soften” the requirement, and detailed revisions are expected to be released in autumn 2026 after a careful review of public comments and expert input.

The latest acknowledgement from CBP leadership suggests the agency recognises “concerns about collecting the extensive amount of data originally outlined” and is moving away from a one‑size‑fits‑all mandate toward a potentially more selective or risk‑based approach to vetting.

Such a revision would likely mean that only certain travellers — possibly those flagged through preliminary screening or identified as higher‑risk by intelligence systems — might be asked to provide deeper social media and background details. Everyday leisure travellers, especially frequent flyers with established travel records, might not face the same level of scrutiny. Experts see this as an attempt by CBP to strike a balance between security interests and preserving the user‑friendly nature of the ESTA process.

How ESTA Works Today

On the current ESTA application, hosted on the official CBP portal, social media fields are listed as optional and do not require mandatory submission. Travellers complete basic biometric and personal data such as passport numbers, contact details and travel plans, without any need for deeper digital footprint disclosure.

This flexibility will remain in place at least until the revised rule is officially published — a timeline that now clearly extends into late 2026.

Implications for International Travellers

If fully implemented in its original form, the mandatory social media disclosure could have imposed additional administrative burdens and raised privacy alarms among travellers from Europe, Asia‑Pacific and other regions participating in the Visa Waiver Program. The move might have also pressured travellers into exposing public or private online content at the pre‑travel screening stage — a first of its kind among major immigration systems.

With the apparent revision, however, many believe the final requirements may be less invasive and more context‑specific. Tourism experts expect that CBP’s revised draft will clarify who is affected, what data categories are truly necessary, and what safeguards will be in place to protect sensitive personal information.

Balancing Security and Freedom of Movement

The U.S. government’s effort to update border screening reflects broader global debates about how democracies can protect citizens while maintaining open and accessible travel systems. National security interests have increasingly justified expanded digital vetting in many countries, but the challenge remains ensuring that such policies do not erode fundamental privacy rights or create undue barriers for lawful travellers.

A spokesperson for DHS noted that any final rule will continue to undergo public review processes before it takes effect, and that travellers should prepare for updated requirements only after official notification. While specifics will not be known until later this year, the agency has made clear its intention to improve clarity and address legitimate concerns raised during the comment phase.

What Comes Next

Travellers, industry stakeholders, and privacy advocates alike are now waiting for the fall 2026 revised proposal, which is expected to be published publicly with clearer regulatory language and details about which data elements will remain mandatory, optional, or removed entirely.

Until then, the current ESTA application process remains unchanged, and social media remains optional as travellers plan their future trips to the United States under the Visa Waiver Program.