2026 Travel Alert: Social Media History + IP Address May Be Required at the Border

Travelling to the US in 2026 could become more intrusive thanks to the latest notice from the U.S. Customs and Border Protection (CBP) and Department of Homeland Security. According to the US Government’s Federal Register, individuals from countries covered by the US Visa Waiver Program will have to “provide their social media from the last 5 years” and “High Value Data Elements.”

The notice is one of the measures by the current administration to improve border security. It’s currently posted for comments before its implementation next year.

Using the Electronic System for Travel Authorisation to Enter the US

Countries covered by the US Visa Waiver Program, such as Japan, the UK, and South Korea, can enter the US through the Electronic System for Travel Authorization. If approved, the individual can stay in the US up to 90 days without the need for additional documentation.

The Electronic System for Travel Authorization should be filed before boarding the flight or ship for water-based travel. The document should be filed at least 72 hours before travel to allow more time for approval. Aside from fees and basic information, according to the US Customs and Border Protection, “the traveler also must answer VWP eligibility questions regarding communicable diseases, arrests and convictions for certain crimes, past history of visa revocation or deportation, and other questions.”

Upcoming Proposed Changes

If the current proposal is approved for February 2026, 42 counties covered by the Visa Waiver Program will provide additional information. Aside from the applicant’s social media accounts used in the last five years, the traveller will also divulge the following:

a. Telephone numbers used in the last five years;

b. Email addresses used in the last ten years;e

c. IP addresses and metadata from electronically submitted photos;

d. Family member names (parents, spouse, siblings, children);

e. Family number telephone numbers used in the last five years;

f. Family member dates of birth;

g. Family member places of birth;

h. Family member residencies;

i. Biometrics—face, fingerprint, DNA, and iris;

j. Business telephone numbers used in the last five years;

k. Business email addresses used in the last ten years.

The IP address mentioned in the requirement will likely determine the accuracy of the photo submitted, especially regarding its location and date.

Privacy vs. Border Security

The United States has the right to protect its borders against foreign threats. Enhancing ETSA requirements should give them additional knowledge about their visitors. Data such as IP addresses and metadata should provide insight into the visitor's previous travel records.

However, the USTA or US Travel Association claims that the extensive data requirement could have serious repercussions and may discourage legitimate visitors who do not want to share their personal information. According to Reuters, it could cause a “chilling effect” on the travel industry as visitors will be wary about their privacy even before setting foot in the US. With the US hosting the 2026 World Cup, these additional requirements might discourage visitors from travelling or could just visit Canada or Mexico, which are also co-hosts of the upcoming sporting event.