Understand Your Rights. Solve Your Legal Problems
A proposed U.S. rule would expand data collected from visa-waiver travelers by requiring five years of social media information and additional personal identifiers.
U.S. Customs and Border Protection has proposed requiring travelers who use the Electronic System for Travel Authorization (ESTA) to provide social media identifiers used during the previous five years.
The change would apply to nationals of the 42 countries in the Visa Waiver Program, who must obtain an approved ESTA before short-term travel to the United States.
ESTA is used for stays of up to 90 days for tourism, business or transit and is a prerequisite for boarding U.S.-bound aircraft and vessels.
The proposal forms part of a broader federal effort to bring visa-waiver screening in line with existing visa requirements, which already mandate disclosure of social media identifiers for most applicants.
The rule would expand CBP’s ability to compare biographical information with online identifiers, reflecting the increasing use of digital screening tools in border security processes. The update remains subject to a public comment period before any final decision.
The draft rule states that ESTA applicants would need to list all social media identifiers used in the last five years. The requirement covers usernames or handles on specified platforms and does not include passwords or access to private accounts.
The identifiers would be used as part of identity verification and security screening, consistent with existing vetting procedures for other immigration categories.
The same notice outlines additional “high-value data elements.” These include phone numbers used in the previous five years, email addresses used in the previous ten years, as well as certain family details such as names, birth dates, and past residences.
The update is described as supporting federal directives that call for expanded use of digital identifiers in screening processes.
The Visa Waiver Program covers citizens of 42 partner countries, including much of Europe as well as several Asia-Pacific and Middle Eastern nations.
Travelers from these countries must use ESTA before entering the United States without a visa for short visits.
Millions of passengers rely on ESTA each year, making it one of the most widely used entry pathways for short-term visitors.
Because ESTA is used by tourists, business travelers and transit passengers, any expansion of data requirements would affect a broad segment of international travelers who typically do not apply for visas.
Discussions have also emerged about streamlining ESTA through dedicated mobile applications, suggesting further procedural changes could occur in the future.
Social media screening has been part of U.S. visa processes since 2019, when most visa applicants began providing five years of social media identifiers on federal forms.
The aim is to assist identity verification and detect potential inconsistencies in applications. That requirement has been maintained across administrations.
Federal oversight bodies have reviewed such programs, noting that agencies must ensure clear standards for evaluating publicly available online content.
Extending similar requirements to ESTA applicants would reduce differences between visa and visa-free screening processes, bringing both under a shared five-year disclosure framework.
Civil-liberties organizations have raised concerns in past debates over similar rules, arguing that mandatory disclosure of social media identifiers may influence how individuals express themselves online.
They note that travelers may worry their posts could be misinterpreted in ways that affect entry decisions. Legal commentators have also examined how expanded data requirements intersect with privacy and transparency obligations.
The proposed ESTA update increases the volume of personal, contact and familial information collected in one submission.
Travel and privacy advocates have highlighted questions about data retention, oversight and the potential use of algorithmic screening tools, which may be difficult for applicants to understand or challenge.
The Visa Waiver Program supports major business and tourism flows between the United States and its partner countries.
Industry groups have previously cautioned that additional data fields, mandatory disclosures or complex online forms may discourage some travelers or introduce administrative burdens.
Countries implementing similar systems, such as the European Union with its forthcoming ETIAS pre-travel authorization are also expanding digital checks before arrival.
Comparative systems vary in scope, and many do not yet require the breadth of historical identifiers proposed for ESTA.
Analysts say the practical effect on travel patterns will depend on how the form is implemented, how straightforward it is for users, and how clearly agencies communicate data-handling practices..
The proposal is subject to a standard federal comment period, during which stakeholders, including individuals, industry groups and foreign governments—may submit feedback.
After reviewing comments, CBP can revise the rule, move forward with implementation or withdraw the changes. Final approval also requires clearance under the Paperwork Reduction Act, which governs federal information-collection activities.
If adopted, the government would likely announce an effective date to allow travelers, carriers and travel platforms to adjust systems and guidance.
Until then, ESTA applicants remain subject to the existing form, which includes an optional social media question but does not mandate disclosure.
Who would have to provide social media information from the last 5 years?
Nationals of Visa Waiver Program countries using ESTA for short-term travel to the United States would need to provide social media identifiers from the previous five years if the rule is finalized.
Will the government request passwords or private access?
No. The proposal refers only to identifiers such as usernames. U.S. immigration agencies do not request passwords or access to private accounts.
Does this requirement already apply to visa holders?
Yes. Most visa applicants have been required since 2019 to list social media identifiers from the previous five years on their visa forms.
How long is ESTA information kept?
Data submitted through ESTA is retained under existing Department of Homeland Security records schedules, which authorize multi-year retention for border-screening records.
Can the proposal still change?
Yes. It may be revised, expanded, narrowed or withdrawn depending on feedback received during the public comment process.
The plan to require visitors to provide social media information from the last five years would mark one of the most substantial expansions of the ESTA data requirements since the Visa Waiver Program was created.
It would place visa-free travelers under disclosure rules already applied to most visa applicants and reinforce the government’s shift toward reviewing digital identifiers as part of routine border screening.
As agencies assess privacy safeguards, data-handling practices and the operational impact on international travel, the final rule will determine the extent of personal and online information millions of visitors must disclose when seeking entry to the United States.
👉 Can the U.S. Legally Demand Tourists’ Social Media History? 👈
