ESTA changes in 2026: What happens after the consultation period ends
It has been clear since the end of 2025 that travellers to the United States will have to expect far-reaching changes to the Electronic System for Travel Authorisation (ESTA) from spring 2026 onwards. Now it seems to be becoming a reality. But what will change for travellers and, above all, when will it take effect?
(Update see below.)
A regulation published in December by the US Department of Homeland Security (Customs and Border Protection) announced that the ESTA application would be expanded to include significantly more personal information in future: in addition to the usual details, applicants would also be required to provide their social media identities from the last five years, previous telephone numbers and email addresses, as well as detailed information about family members and contact details. According to the order published in the Federal Register, this collection of data would serve to better address national security risks, but it has been met with considerable criticism from data protection and civil rights organisations.
The current discussion centres on a 60-day public consultation period, which ends today (9 February 2026), after which the US authorities will decide on possible adjustments. Whether and, above all, when the changes will become legally binding has not yet been officially confirmed; there are no clear binding dates or immediate implications for ESTA applications that are already being submitted today. However, travellers should be aware that the official collection of personal and digital data in the ESTA process could go far beyond what has been customary in the past, and it is advisable to make appropriate preparations, such as carefully compiling all relevant social media accounts and contact information. This makes reliable planning and timely application all the more important for 2026, not only for tourists but also for business travellers in the medium term.
UPDATE (11 February 2026): The timeline for further developments has now been published. According to this, the consultation period was followed by a one- to two-month review of the public comments by DHS/CBP. The review phase will end with a 30-day notice, which will again allow for public comment. This will be followed by a review by the Office of Management and Budget (OMB), which is expected to take April and May. Implementation of the new rule is therefore not expected until mid-2026 at the earliest.
(Update see below.)
A regulation published in December by the US Department of Homeland Security (Customs and Border Protection) announced that the ESTA application would be expanded to include significantly more personal information in future: in addition to the usual details, applicants would also be required to provide their social media identities from the last five years, previous telephone numbers and email addresses, as well as detailed information about family members and contact details. According to the order published in the Federal Register, this collection of data would serve to better address national security risks, but it has been met with considerable criticism from data protection and civil rights organisations.
The current discussion centres on a 60-day public consultation period, which ends today (9 February 2026), after which the US authorities will decide on possible adjustments. Whether and, above all, when the changes will become legally binding has not yet been officially confirmed; there are no clear binding dates or immediate implications for ESTA applications that are already being submitted today. However, travellers should be aware that the official collection of personal and digital data in the ESTA process could go far beyond what has been customary in the past, and it is advisable to make appropriate preparations, such as carefully compiling all relevant social media accounts and contact information. This makes reliable planning and timely application all the more important for 2026, not only for tourists but also for business travellers in the medium term.
UPDATE (11 February 2026): The timeline for further developments has now been published. According to this, the consultation period was followed by a one- to two-month review of the public comments by DHS/CBP. The review phase will end with a 30-day notice, which will again allow for public comment. This will be followed by a review by the Office of Management and Budget (OMB), which is expected to take April and May. Implementation of the new rule is therefore not expected until mid-2026 at the earliest.