Travelers dreaming of a trip to the United States in 2026 may soon face a digital hurdle that could change the way the world visits America. In a move that’s already stirring controversy from Sydney to Stockholm, the U.S. government has announced a proposal that would require millions of visa-exempt foreign visitors to submit five years’ worth of social media history, along with expanded personal data, before being allowed entry.
According to U.S. Customs and Border Protection (CBP), the proposal—revealed on December 11, 2025—targets citizens of the 42 countries in the Visa Waiver Program. This group includes much of Europe, the United Kingdom, Australia, New Zealand, Japan, Israel, and Qatar. These travelers, accustomed to using the streamlined Electronic System for Travel Authorization (ESTA), may soon find their online footprints under scrutiny as never before.
The Trump administration, which spearheaded the measure, argues it’s all about safety. During a White House press briefing, President Donald Trump declared, “We just want people to come here and be safe. We want to make sure we do not allow the wrong people into our country.” (Colombia One). But critics, digital rights advocates, and even some foreign governments are asking whether this latest step goes too far, putting privacy, free speech, and international goodwill at risk.
So, what exactly is changing? Under the draft rule published by CBP and the Department of Homeland Security, ESTA applicants would be required to provide not just five years of social media usernames, but also email addresses used over the past decade, phone numbers from the last five years, biometric information including a selfie, and a detailed family history. Unlike previous forms where social media fields were optional, the new proposal makes them mandatory. Failing to comply could mean denial of entry.
This marks a significant shift from the current system. As TravelHost explains, the ESTA form has traditionally asked for basic personal details—passport information, contact data, and criminal history. Social media details have been optional since December 2016. Now, the U.S. is poised to make them a central part of its vetting process.
For many, the implications are daunting. Travelers will need to dig up old usernames, review the visibility of their profiles, and prepare to hand over a digital diary of their opinions, photos, and interactions. Passwords aren’t required, but some interpretations suggest that accounts may need to be publicly viewable for vetting. The ESTA process may also move to a mobile app, requiring biometric verification and possibly geolocation checks at the time of submission.
“Start early to gather five years of account information, including old usernames,” advises TravelHost. “Keep records of all social media platforms you have used in the last five years.” It’s a far cry from the days when a passport and a plane ticket were all you needed for a U.S. holiday.
The policy is open for public comment until February 9, 2026. This standard regulatory process is expected to draw fierce debate. Civil-rights organizations, privacy experts, and immigrant advocates are preparing to weigh in, and legal challenges may follow if the administration pushes forward without addressing constitutional concerns.
For Australians, the changes are especially acute. As ABC News reports, Australia is part of the Visa Waiver Program, and the ESTA application has long been a simple online process. But the new rules would make social media disclosure mandatory for Aussies, too. The Department of Foreign Affairs and Trade (DFAT) has updated its travel advice several times in 2025 to reflect stricter entry requirements and warn of a potentially volatile environment at U.S. demonstrations.
US Customs and Border Protection says it conducted 51,000 basic media searches and 4,000 advanced media searches of electronics at U.S. ports of entry in 2025—a 15% increase from 2024, with most targeting foreign nationals (ABC News). The agency has also conducted more than 55,000 searches of electronic devices this year, underscoring the growing emphasis on digital vetting.
International law expert Professor Donald Rothwell from the Australian National University told ABC News that people who have actively criticized U.S. policies on social media are most at risk. “The people most at risk are those who are active on social media and who have expressed criticism of US policies,” Rothwell said. He himself has stopped accepting invitations to speak in the U.S. due to the new climate.
The roots of this policy stretch back to Donald Trump’s first term, when “extreme vetting” became a catchphrase for a series of executive orders on visas and immigration. In 2019, the administration began requiring travelers from non-waiver countries to provide five years of social media history. Now, the net is being cast wider, ensnaring even those from countries with historically close ties to the U.S.
Officials maintain that the new screening is necessary to prevent terrorists, criminals, and other security threats from entering the country. But critics argue it’s a blunt instrument that could sweep up innocent travelers, chill free expression, and even deter tourism. “Some believe overly invasive screening could drive travelers to other destinations, while others view it as part of a shift toward digital identity verification and border security modernization,” writes TravelHost.
There’s also the looming question of timing. The United States, along with Mexico and Canada, is set to host the 2026 FIFA World Cup—a moment when millions of international visitors are expected to flood North America. Tourism experts warn that more complicated entry requirements could slow down processing, discourage visitors, and create logistical headaches at a time when global mobility is critical.
Diplomatically, the proposal is already ruffling feathers. European countries, many of which are part of the Visa Waiver Program, may view the measure as disproportionate and incompatible with reciprocal privacy standards. Some analysts warn that it could trigger policy retaliation or force Washington to reconsider certain aspects under international pressure.
Yet, the Trump administration appears undeterred. When asked whether he was concerned the measure might affect tourism, President Trump replied, “We want safety, we want security, we want to make sure we’re not letting the wrong people come into our country.” (ABC News) A CBP spokesperson added that the notice is “simply the first step in starting a discussion to have new policy options to keep the American people safe.”
Other countries do have their own forms of digital vetting, but few Western democracies require such extensive access to social media history. The DFAT warns Australians to review visible information on sensitive issues on public profiles before traveling to places like Russia or the Middle East, where digital scrutiny is more common and sometimes enforced with legal consequences.
For now, the proposal remains just that—a proposal. The public has 60 days to comment, and the outcome is far from certain. But one thing is clear: the debate over digital privacy, security, and the future of international travel is only getting started. As governments grapple with the balance between safety and openness, travelers everywhere are left to wonder just how much of their online lives they’ll have to reveal at the border.
Whatever the final decision, the United States has placed itself at the heart of a global conversation about privacy, security, and what it means to cross borders in the digital age.
