ESTA system , essential for visa-free travel to the United States , could change in the coming years. According to the specialized press, the European Data Protection Board (EDPB) recently contacted the European Commission regarding a US reform that could expand the collection of personal information during travel authorization applications.
For tourism professionals, this potential development goes beyond a simple administrative matter. It could change the way European travelers plan their trips to the United States and strengthen the support role of travel agencies.
Summary
A reform that raises questions about data protection
The alert comes from the European Data Protection Board, the body responsible for ensuring the consistent application of the General Data Protection Regulation ( GDPR ) in the European Union.
In a letter addressed to the European Commission on March 10, 2026, its president, Anu Talus, expressed concerns regarding the changes being considered by the US authorities to the operation of the ESTA system. This system currently allows citizens of several dozen countries, including those of the European Union, to travel to the United States without a visa for short stays.
According to the specialized press, US authorities are considering expanding the information requested during electronic travel authorization applications.
The point that is particularly noteworthy concerns the volume of personal data that is likely to be collected.
In his letter, Anu Talus points out that the proposed reform could lead to the collection of more detailed information on European travellers, including details of their social media activity over the past few years or certain data concerning members of their family.
For the EDPB, this development raises questions about the protection of the personal data of European citizens and the legal safeguards associated with their processing.
A possible change in ESTA procedures
Another development mentioned in the discussions: the possibility that ESTA applications could be made exclusively via the official mobile application of the US Customs and Border Protection agency.
According to information relayed by the specialized press, this option could eventually replace the current procedure which allows an application to be submitted via the official website.
If this change were to be confirmed, it would represent a significant shift in how travelers complete their administrative procedures before a trip to the United States.
A topic that directly concerns tourism professionals
For travel agencies and tour operators, the issue of data protection within the framework of ESTA is not solely a legal one. It could have concrete consequences for customer relations and the management of travel formalities.
A broader collection of personal information could lengthen administrative procedures and generate more questions from travelers. Travel agents may be called upon to play an even more significant advisory role in guiding their clients through these processes.
In my view, this development illustrates a broader trend: travel formalities are becoming progressively more complex as states strengthen their border control mechanisms and digital data collection tools.
In this context, education and support become key elements to maintain the fluidity of the customer experience.
A debate that goes beyond the simple framework of tourism
The issue raised by the EDPB is part of a broader debate between the European Union and the United States on the management of personal data and cooperation on security.
The European Data Protection Board therefore calls on the European Commission to carefully examine the proposed developments and to engage in dialogue with the US authorities in order to guarantee respect for the fundamental rights of European citizens.
For tourism stakeholders, this report serves as a reminder that administrative formalities and security policies can have a direct impact on the attractiveness of destinations and on travelers' perceptions.
At this stage, no reforms have yet come into effect. But the debate initiated by the EDPB shows that the issue of data protection could become a central element in the evolution of the ESTA system in the years to come.
In short
- The European Data Protection Board has alerted the European Commission to a possible change in the ESTA system.
- US authorities are reportedly considering expanding the collection of personal data during travel authorization applications.
- Information related to social media or certain family members may be requested.
- The ESTA procedure could evolve towards a greater use of the official mobile application.
- Travel agencies will need to closely monitor the progress of these discussions.
- The debate is part of a broader context of transatlantic cooperation on security and data protection.
Sources
The European Data Protection Board is calling on Brussels to address the planned reform of ESTA
👉 Access all our tourism reports, statistics and analyses on Tourisme Stats .
➡️ Check out our full report on B2B Tourism to discover the key trends, figures and strategies for 2026.
👉 Stay informed about business tourism trends: subscribe to InfosTourisme Inside .
📘 Also check out our practical pages for tourism professionals .
📩 Send your press releases .
