The United States is preparing to implement one of the largest changes in the information required from applicants for the ESTA (Electronic System for Travel Authorization) since the creation of the Visa Waiver Program. U.S. Customs and Border Protection (CBP) has announced, through a notice published in the Federal Register, a major reform of the process that will affect both tourists and business travellers entering the country without a visa.
The most significant change —and the one generating the greatest concern— is the new requirement to provide information about social media accounts used during the past five years, effectively turning digital screening into a formal component of U.S. immigration control.
⏺️ Social media information as a mandatory ESTA requirement
Until now, the social media field in the ESTA application was an optional question. However, CBP has confirmed that it will become a mandatory requirement.
This means that:
- Applicants will have to provide all social media platforms used during the last five years, including usernames.
- Authorities may cross-check this information with other data in the file and even review public online behaviour.
- Failure to provide complete and truthful information may result in the ESTA being denied.
This level of scrutiny is unprecedented among Western countries and represents a significant expansion of pre-travel security controls.
⏺️ More personal and family data: toward a complete digital and biographical profile of the traveller
In addition to the mandatory disclosure of social media accounts, CBP plans to introduce several additional required fields:
- Phone numbers used in the past 5 years
- Email addresses used in the past 10 years
- IP addresses and metadata from uploaded photos
- Detailed family information: names, dates and places of birth, phone numbers, residences
- Advanced biometric data: facial image, fingerprints, DNA, iris
- Professional data from recent years: work emails and phone numbers
This is an unprecedented expansion that redefines the level of personal information required from travellers entering the U.S. under the Visa Waiver Program.
⏺️ Mandatory photograph and transition to a mobile-only application system
CBP also plans additional structural changes:
- A mandatory selfie upload, in addition to the passport photo page
- The gradual elimination of the ESTA website: applications will be processed exclusively through the official mobile app
According to CBP, these changes are justified by technological security needs. The mobile application enables biometric passport chip verification, improves image authenticity checks, and reduces fraud in applications submitted through third parties.
⏺️ How this may affect Spanish and European travellers
If you frequently travel to the U.S. under the Visa Waiver Program (ESTA), it is important to consider:
- Much greater scrutiny: social media and metadata analysis may lead to additional checks and longer review times.
- Longer processing times: the expanded information requirements could delay ESTA approvals.
- Review of your digital presence: public posts, interactions, sensitive content or inconsistencies may be evaluated.
- Risk of inconsistencies: old accounts, discontinued phone numbers or forgotten email addresses may raise questions if not properly declared.
💡 Remember: ESTA is the electronic travel authorization system that allows citizens of Visa Waiver Program countries to travel to the United States for tourism or business without obtaining a traditional visa. It is a mandatory, fast procedure valid for two years, but approval does not guarantee entry into the country. The final decision always rests with the border officer at the airport.
At ARC Legal, we recommend reviewing your digital history carefully and preparing all required information in advance for future applications.
⏺️ When will these changes take effect?
Following its official publication on 10 December, a 60-day period opens for public comments. Once this period ends, the measures must be approved by the Office of Management and Budget (OMB). After approval, implementation may begin gradually in the following months.
⏺️ Conclusion: a new era in digital immigration control
The mandatory requirement to disclose social media accounts marks a turning point in the relationship between privacy and border control. For many travellers, this will mean a more detailed, slower process subject to digital scrutiny not previously included in ESTA procedures.
ARC Legal will continue to monitor these developments to keep our community informed and to support clients who travel frequently to the United States.
⏺️ ARC Legal Abogados is here to help
At ARC Legal, we provide personalised guidance on international mobility, document compliance and immigration risk assessment. From our office in Madrid —located just a short distance from several embassies and consulates— we assist clients with procedures that require precision, coordination and a clear understanding of each authority’s requirements.
If these changes may affect you, we will be pleased to assist.
Related publications
- Travelling to the Schengen Area will become more expensive: The ETIAS fee increases to €20
- Updated Diplomatic and Consular listings in Spain: A key resource for foreign nationals | December 2025
- The European Parliament strengthens the EU visa suspension mechanism
¿Quieres leer este artículo en español 🇪🇸? Aquí te dejamos el enlace: El ESTA podría cambiar por completo: revisión obligatoria de redes sociales y ampliación del historial personal
This article is for informational purposes only and does not constitute legal advice. Immigration regulations are subject to frequent administrative and interpretative changes. At ARC Legal, we make every effort to keep our content updated and aligned with official sources, but we always recommend consulting with a specialized lawyer before starting any procedure or making legal decisions. For personalized guidance, don’t hesitate to contact us.