Latest / IMI Podcasts / US Demands Access to EU Citizens’ Fingerprints and Political Data; Brussels Prepares to Comply
Transcript
- 0:00SPEAKER_00: Brussels is preparing to negotiate a data sharing agreement with the United States that would grant American border authorities access to the fingerprints, facial scans, and sensitive personal data of European citizens, according to Euractive.
- 0:15SPEAKER_00: Continued visa-free travel to America is the price tag.
- 0:19SPEAKER_00: Washington set the terms.
- 0:21SPEAKER_00: The arrangement is called the Enhanced Border Security Partnership, referred to as EBSP.
- 0:28SPEAKER_00: Under it, each EU member state would sign a bilateral agreement with the U.S.
- 0:33SPEAKER_00: Department of Homeland Security, or DHS, opening its national biometric databases to American border officials.
- 0:42SPEAKER_00: EU ministers approved a mandate to begin negotiations in December 2025.
- 0:48SPEAKER_00: No government raised a fundamental objection, the Council adopted the decision without debate.
- 0:54SPEAKER_00: According to the Commission's negotiating directives and a draft text obtained by Euractive, the categories of data eligible for exchange go far beyond passport details.
- 1:05SPEAKER_00: Fingerprints and facial scans are the core of the proposal.
- 1:09SPEAKER_00: But the draft also contemplates transfers of data revealing ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, and details about a person's health or sex life, provided such transfers are strictly necessary and proportionate.
- 1:29SPEAKER_00: Basic identity information tied to travel documents would be shared automatically.
- 1:34SPEAKER_00: More sensitive categories would require additional justification, though the precise thresholds remain undefined pending negotiation.
- 1:43SPEAKER_00: Adam Yuknevich, CEO of BitCitizen, and a former U.S.
- 1:48SPEAKER_00: federal employee who spent 12 years at DHS, put it bluntly.
- 2:07SPEAKER_00: Washington has set a December 31, 2026 deadline for EBSP agreements to be operational.
- 2:14SPEAKER_00: After that date, DHS will assess each country's compliance during visa waiver program, referred to as VWP reviews.
- 2:23SPEAKER_00: Countries that fail to meet U.S.
- 2:25SPEAKER_00: expectations risk suspension from the VWP, which would reimpose visa requirements on their citizens.
- 2:33SPEAKER_00: Twenty-four EU member states currently participate in the VWP, Bulgaria, Romania, and Cyprus are already excluded.
- 2:41SPEAKER_00: For those 24, the implication is binary.
- 2:44SPEAKER_00: Share the data, or tell your citizens they need visas to visit America.
- 2:49SPEAKER_00: The Commission's negotiating mandate seeks to establish a single EU-wide framework rather than leave each capital to negotiate alone with DHS.
- 3:01SPEAKER_00: According to the Commission's proposal, the agreement would set out the legal structure and conditions for the exchange of information between the competent authorities of the EU member states and of the U.S.
- 3:14SPEAKER_00: A separate but related dimension of the draft concerns automated decision making.
- 3:19SPEAKER_00: As currently written, the text does not explicitly prohibit U.S.
- 3:23SPEAKER_00: authorities from using algorithms to assess EU travelers.
- 3:28SPEAKER_00: Decisions with significant negative consequences for individuals may not be made solely by automated systems, unless U.S.
- 3:35SPEAKER_00: domestic law authorizes such procedures.
- 3:38SPEAKER_00: Appropriate safeguards would apply in that scenario, including the right to request human review.
- 3:45SPEAKER_00: Whether any of this is compatible with the General Data Protection Regulation, also known as GDPR, which restricts automated decision-making and applies extraterritorially, is a question the draft does not resolve.
- 3:59SPEAKER_00: Yuknevich is less diplomatic about the carve out.
- 4:16SPEAKER_00: Europe's data protection watchdog has acknowledged the gravity of the proposal.
- 4:21SPEAKER_00: In a September 2025 opinion, European Data Protection Supervisor, or EDPS, Wojciech Vieworovsky, described it as the first EU agreement involving large-scale sharing of personal data, including biometrics, with a third country.
- 4:39SPEAKER_00: He stressed that the processing of personal data under the agreement must not exceed what is strictly necessary and proportionate.
- 4:47SPEAKER_00: Whether that standard can survive negotiations with an administration that has simultaneously proposed requiring five years of social media history from all VWP travelers is a question the EDPS opinion does not answer.
- 5:02SPEAKER_00: That separate proposal, put forward by U.S.
- 5:05SPEAKER_00: Customs and Border Protection in December 2025, closed its public comment period on February 9, 2026.
- 5:14SPEAKER_00: He framed the broader dynamic in starker terms.
- 5:17SPEAKER_00: Quote, this deal is a classic U.S.
- 5:21SPEAKER_00: style trade.
- 5:22SPEAKER_00: Convenience now, accountability later.
- 5:25SPEAKER_00: But with the U.S.
- 5:26SPEAKER_00: government later has a way of never showing up, end quote.
- 5:30SPEAKER_00: The U.S., Yuknevich added, would never accept an equivalent arrangement in reverse.
- 5:36SPEAKER_00: Quote, the irony and hypocrisy of this deal are obvious, end quote.
- 5:41SPEAKER_00: Europe keeps the boarding pass, Washington keeps the data, and the traveler keeps the risk.
- 5:48SPEAKER_00: Renew Europe MEP Raquel Garcia Hermita von der Waale has submitted written questions to the Commission and EU capitals, demanding to know why EU institutions agreed to open negotiations on sharing sensitive data with the U.S.
- 6:02SPEAKER_00: during a period of heightened transatlantic tension.
- 6:06SPEAKER_00: Hers has been a relatively isolated voice.
- 6:09SPEAKER_00: No EU member state raised fundamental objections to the proposal, according to reporting by StateWatch, though several flagged concerns about timing, legal basis, and data protection.
- 6:21SPEAKER_00: David Lesperance of Lesperance and Associates urges perspective on the timeline.
- 6:27SPEAKER_00: Quote, it must be emphasized that this is a draft agreement in its earliest stage, he told IMI.
- 6:35SPEAKER_00: There are a significant number of legal issues that must be dealt with, such as the GDPR, along with practical implementation issues, end quote.
- 6:44SPEAKER_00: Lesperance points to recent border enforcement incidents as a source of legitimate concern for European travelers, but cautions against treating the EBSP as imminent.
- 6:55SPEAKER_00: Quote, if one looks back at prior similar efforts, such as the Western Hemisphere Travel Initiative, such programs take years to negotiate and then implement, end quote, he said.
- 7:07SPEAKER_00: That initiative, mandated by Congress in 2004, in the wake of the September 11 attacks, took five years to roll out fully, with its final phase reaching land and sea borders, only in June 2009.
- 7:24SPEAKER_00: One can safely predict that Christy Nome will not be the head of DHS by the time this becomes a reality, Lesperance added.
- 7:32SPEAKER_00: Yuknevich, whose years inside DHS gave him a front-row seat to how the department handles large datasets, is less sanguine about the destination, even if the timeline is long.
- 7:44SPEAKER_00: Quote, I've seen how big bureaucracies like the US government handle big data.
- 7:50SPEAKER_00: It spreads, he said.
- 7:52SPEAKER_00: If DHS is going to hold this much EU traveler data, it needs real technical controls, hard audit logs, and meaningful redress, because committee meetings don't fix harmed people, end quote.
- 8:04SPEAKER_00: He framed the broader dynamic in starker terms.
- 8:07SPEAKER_00: Quote, this deal is a classic U.S.
- 8:10SPEAKER_00: style trade.
- 8:11SPEAKER_00: Convenience now, accountability later.
- 8:14SPEAKER_00: But with the U.S.
- 8:15SPEAKER_00: government later has a way of never showing up, end quote.
- 8:20SPEAKER_00: The U.S., Yuknevich added, would never accept an equivalent arrangement in reverse.
- 8:25SPEAKER_00: Quote, Europe keeps the boarding pass, Washington keeps the data, and the traveler keeps the risk, end quote.
- 8:32SPEAKER_00: The EBSP does not exist in isolation.
- 8:35SPEAKER_00: It is one of several concurrent U.S.
- 8:38SPEAKER_00: moves expanding the volume of personal data collected from international travelers.
- 8:43SPEAKER_00: Under the proposed overhaul of the electronic system for travel authorization, social media disclosure would become mandatory, with additional fields covering biometric data, family members' contact histories, and email addresses spanning 10 years.
- 8:59SPEAKER_00: Several EU member states, including Ireland, the Netherlands, Denmark, Germany, and Finland, have already issued travel advisories concerning the US.
- 9:09SPEAKER_00: On its own side of the Atlantic, the EU is building parallel biometric border infrastructure.
- 9:15SPEAKER_00: Its entry-slash-exit system, which captures fingerprints and facial scans from non-EU travelers at Schengen borders, has been in phased rollout since October 2025.
- 9:27SPEAKER_00: Full implementation across all external borders is set for April 10, 2026.
- 9:33SPEAKER_00: A pre-travel screening system analogous to ESTA, the European Travel Information and Authorization System, is expected to follow in late 2026, with mandatory enforcement from 2027.
- 9:46SPEAKER_00: Both sides of the Atlantic are assembling ever larger databases of traveler data.
- 9:51SPEAKER_00: The EBSP would connect some of them.
- 9:55SPEAKER_00: This episode first appeared as an article by Ahmad Abbas on IMIDaily.com.
- 10:01SPEAKER_00: Subscribe for free to the IMI newsletter for breaking news and updates from the investment migration industry, and upgrade your membership to IMI Pro to get access to our exclusive professional community, citizenship catalog, investment migration company Rolodex, private briefings, and more members only content.