UK Joins Germany, Japan, Australia, and Thirty Eight Other Countries in New US ESTA Proposal Requiring Social Media, Biometric Data, and More for Travelers

Published on December 11, 2025

By: Paramita Sarkar

The United States Customs and Border Protection (CBP), part of the Department of Homeland Security (DHS), has published a proposed rule in the Federal Register on December 10, 2025, seeking to change the Electronic System for Travel Authorization (ESTA) requirements for travelers from the Visa Waiver Program (VWP) countries. The proposed changes are part of the U.S. government’s ongoing efforts to enhance national security and compliance with an Executive Order aimed at strengthening the vetting process for international travelers.

This proposed rule applies to travelers from 42 countries currently enrolled in the Visa Waiver Program, including countries such as the United Kingdom, Germany, Australia, Japan, New Zealand, and South Korea, who wish to travel to the U.S. without a visa. The DHS plans to implement additional security checks, which include the collection of a wider range of data through the ESTA application process.

The proposed changes have sparked significant discussions regarding privacy and the broader implications of gathering detailed personal and social media information from international travelers. While it remains in the proposed stage, the rule will be open for public comments until February 2026. If finalized, the new requirements will affect travelers who use the ESTA to gain access to the U.S. under the VWP, setting the stage for more robust security vetting.

Here’s an in-depth look at the proposed changes, the countries affected, and the potential impact on travelers.

1. What is the Visa Waiver Program (VWP)?

The Visa Waiver Program allows citizens from specific countries to travel to the U.S. without requiring a visa for short visits (up to 90 days) for tourism, business, or transit. This is possible as long as the traveler possesses an approved ESTA and their visit is for non-immigrant purposes.

• Countries Participating in the Visa Waiver Program: There are currently 42 countries that are eligible for the VWP. Citizens of these countries can travel to the U.S. without a visa by obtaining an ESTA, which screens individuals before they board a flight to the U.S.
• Travel Authorization Requirement: For travelers from VWP countries, an approved ESTA is required prior to travel. The ESTA application gathers basic biographical information, travel details, and answers to security-related questions.
• Countries Affected by the Proposed Rule: The proposed changes in data collection would apply to travelers from the 42 countries currently eligible for the VWP. These countries are spread across several regions, including Europe, Asia-Pacific, and the Americas.

List of 42 Countries Participating in the U.S. Visa Waiver Program (VWP):

Here is the full list of countries that are part of the Visa Waiver Program (VWP) and would be affected by the proposed changes to the ESTA application process.

Europe:

1. United Kingdom
2. Germany
3. France
4. Italy
5. Sweden
6. Norway
7. Spain
8. Netherlands
9. Poland
10. Switzerland
11. Belgium
12. Finland
13. Austria
14. Denmark
15. Portugal
16. Ireland
17. Greece
18. Hungary
19. Estonia
20. Slovakia
21. Latvia
22. Lithuania
23. Luxembourg
24. Malta
25. Czech Republic
26. Slovenia
27. Monaco
28. Romania (Designated for VWP in 2025)

Asia-Pacific:

29. Australia
30. Japan
31. New Zealand
32. South Korea
33. Singapore
34. Brunei
35. Taiwan
36. Malaysia

Americas:
37. Chile
38. Qatar (Middle East)

Middle East:
39. Israel
40. UAE (United Arab Emirates)

Eligibility Notes: Some countries, such as Taiwan and the United Kingdom, have additional eligibility criteria that may apply to specific travelers based on their citizenship status.

2. What Data Will Be Collected Under the Proposed Rule?

The proposed rule outlines additional data collection elements for travelers applying for ESTA approval. Travelers will be required to submit the following:

Social Media Identifiers (5 Years):

• What’s New: For the first time, travelers would be required to provide their social media handles for the past five years.
• Why It’s Important: The U.S. government considers social media history to be an essential data point for assessing national security risks. Social media accounts can offer insights into an individual’s personal beliefs, associations, and potential links to extremist activity or threats.

Email Addresses (10 Years):

• What’s New: Travelers will be required to list all email addresses used in the past ten years.
• Why It’s Important: The email addresses will be cross-checked to verify identity, and the information will be used to spot patterns of suspicious activity or potential ties to individuals under scrutiny.

Telephone Numbers (5 Years):

• What’s New: A list of telephone numbers used over the past five years will be mandatory.
• Why It’s Important: Telephone numbers provide additional contact details to establish credibility and facilitate further vetting.

Expanded Family Information:

• What’s New: Expanded family details, including full names, dates of birth, places of birth, and residences, would be required.
• Why It’s Important: Family information is crucial for cross-referencing and identifying possible links to individuals with national security concerns.

Biometric Data (Potential):

• What’s New: Although not fully outlined, the proposal mentions the possibility of collecting biometric data, such as facial recognition, fingerprints, DNA, and iris scans.
• Why It’s Important: Biometric data would enhance the vetting process, helping authorities match travelers to their real-world identities and detect fraudulent or suspicious behavior.

Other Data:

• What’s New: The collection of IP addresses and metadata from photos submitted with applications.
• Why It’s Important: This information could help establish the digital footprint of travelers and verify whether their details align with public records and travel behavior.

3. Why Are These Changes Being Proposed?

The proposed changes are part of the U.S. government’s broader strategy to strengthen national security by enhancing the vetting process for international travelers. Specifically, these changes are being made to comply with a January Executive Order that mandates better screening procedures for individuals entering the U.S. under the Visa Waiver Program.

The Executive Order aims to ensure that the U.S. government has access to sufficient data to detect potential threats before individuals board flights to the country. The data points collected through ESTA are designed to help U.S. authorities identify suspicious patterns of travel or behavior that might not be apparent through standard visa application processes.

By increasing the amount of personal information collected, the DHS intends to create a more thorough vetting process for travelers while also improving the effectiveness of intelligence gathering at the point of entry. This proposal is aligned with global security trends and reflects growing concerns over cybersecurity, terrorism, and border protection.

4. How Will These Changes Impact Travelers?

The proposed rule has sparked concerns about privacy and the broader implications of data collection. Here’s how these changes may affect travelers from the 42 Visa Waiver Program countries:

Impact on Privacy:

• The inclusion of social media history and biometric data could be seen as an invasion of privacy by many travelers. Social media accounts and phone numbers can reveal a lot about an individual’s personal life, and some travelers may be uncomfortable sharing this information.

Increased Complexity:

• Travelers will need to take extra steps to ensure they comply with the new requirements. For individuals who don’t use social media or have used multiple email addresses and phone numbers over the past decade, the process could feel more burdensome.

More Security and Transparency:

• On the other hand, travelers may feel reassured that these additional checks will enhance the safety of the United States and provide clearer security measures to reduce the risk of entry by individuals who might pose a national security threat.

Possible Delays:

• As the ESTA application process becomes more complex, there may be delays in approval times. Travelers may need to allow more time for their ESTA applications to be processed, particularly as CBP adapts to new data collection and verification systems.

5. What’s Next for the Proposed Rule?

The proposed rule is currently in the public comment period, which will last for 60 days until February 2026. During this time, the public, as well as industry stakeholders, will have the opportunity to share feedback on the proposed changes. After the comment period, the CBP will review the feedback, make necessary adjustments, and potentially finalize the rule.

Once finalized, the new ESTA requirements will be implemented for travelers from the 42 VWP countries. It is expected that these changes will be in effect by 2027, ahead of the 2028 U.S. election, marking a significant shift in the way the U.S. manages border security and traveler data.