December 10, 2025, 9:57 am | Read time: 3 minutes
Are you familiar with the saying “What happens on social media stays on Google forever”? It suggests that almost everything shared online—such as on social networks—remains permanently accessible. This is partly due to data storage by search engines. U.S. authorities can already track what tourists have posted on Instagram, X, and other platforms. However, a new proposal by the Customs and Border Protection (CBP) could make this significantly easier: In the future, travelers may be required to fully disclose their social media activities from the past five years. This regulation could soon take effect.
Disclosure of Social Media Activities Soon Mandatory?
At a time when U.S. entry practices are under increased scrutiny—recently, several cases made headlines where European visitors were detained or turned away despite having valid ESTA approvals—the next step toward even more comprehensive security checks is on the horizon. U.S. authorities plan to evaluate the digital footprints of travelers to the U.S. in addition to traditional travel documents. An official document indicates that disclosing social media activities could become a mandatory part of ESTA and visa applications.
Until now, providing information about social media activities was voluntary and mainly relevant for traditional visas. For tourists planning only a short stay in the U.S., these details were not officially reviewed. Now, these details could become a mandatory part of the ESTA application. According to the proposal, travelers from Germany and other countries would need to list all social media accounts they have used in the past five years. If the regulation takes effect, an ESTA application without complete social media information could be considered incomplete and rejected.
Implementation Possible from February
The new regulation could be gradually implemented starting in February. It would represent a significant tightening of an already opaque practice. This is the official announcement of changes by the U.S. agency—not just rumors of possibilities. U.S. administrative law provides for a two-month comment period following the proposal, during which agencies, organizations, and individuals can provide feedback. And this has already happened.
Criticism from Privacy Advocates Against Authorities’ Arguments
The idea has been simmering for some time, and civil rights groups and privacy organizations have been critical for years. They warn, among other things, that unclear criteria in risk assessment could lead to misinterpretations. Additionally, the nonprofit organization American Civil Liberties Union (ACLU) warns that the requirement to disclose social media activities endangers freedom of expression and association. It is clear: Providing such data not only offers insights into the private lives of U.S. visitors but can also provide comprehensive conclusions about their political views and professional backgrounds.
And that is precisely the intention of U.S. authorities. They argue that access to social media data is an important tool for early detection of national security threats, such as terrorism, espionage, or organized crime. Various details are still undefined. It remains unclear, for example, which platforms might be affected and how strictly the information will be verified. The conditions for permanent storage and use also need to be clarified.