ESTA Update: CBP to Review Social Media & Revise Process

U.S. Customs and Border Protection (CBP) proposed significant changes to the application process for the Visa Waiver Program (VWP) on December 10, 2025, including mandatory social media reviews and expanded data collection requirements. The VWP currently allows citizens of designated countries to travel to the United States for business or tourism for up to 90 days without a visa by completing an ESTA application online at https://esta.cbp.dhs.gov/esta/.

ESTA Application Updates

1. Social Media and Data Collection: In accordance with Executive Order 14161, CBP plans to require ESTA applicants to provide social media information from the five years prior to their application. The agency also intends to collect more extensive biographic and biometric data, including phone numbers, email addresses, family information, IP addresses, and biometric identifiers like face, fingerprints, DNA, or iris scans “when feasible.”
2. Voluntary Departure Pilot Program: A pilot program will allow departing travelers to voluntarily submit departure information through the CBP mobile application, including biographic data, facial images, and geolocation data. “Liveness detection” software will verify the submitted facial image. Confirmed departures will be recorded in the CBP Arrival and Departure System (ADIS).
3. Photo Uploads: ESTA applicants will be required to upload a facial photograph (selfie) along with the biographical page of their passport, both on the website and through mobile applications. Applicants using third parties will also need to submit a photo of the traveler.
4. Mobile Application Transition: CBP intends to move entirely to a mobile application platform for ESTA applications, decommissioning the existing website. The ESTA website will remain available for informational purposes and to check application status.
5. VWP Country Updates: Romania has been removed from the list of VWP countries.

CBP is accepting public comments on these proposed revisions for 60 days following the publication of the notice in the December 10 Federal Register.