The U.S. has implemented a new biometric rule that will collect photographs and potentially fingerprints and iris scans from nearly every foreign traveler.
Officially, the system aims to address security and visa-overstay concerns, but its scope is far more comprehensive than any previous program. Until now, biometric collection at exit was limited to pilot programs at select ports.
The most significant aspect of this new rule is its sheer scope. The mandatory biometric collection now applies to nearly all non-U.S. citizens, a group that now explicitly includes lawful permanent residents (Green Card holders) and Canadian visitors. This marks a major shift, as these groups were previously exempt from certain requirements. Now, even long-term residents and visitors from one of America’s closest allies are subject to the same broad biometric screening process.
The rule is being enforced at all entry and exit points, including airports, seaports, and land crossings—even for those traveling on foot. This transforms the nature of even the most casual border crossings, erasing historical distinctions in screening.
In a particularly noteworthy change, the mandatory biometric collection policy has almost no age exemptions. The rule explicitly states that it applies to children below the age of 14 and adults over the age of 79. This is a surprising detail, as these specific age groups are often granted exemptions from such stringent identity verification procedures in other official contexts. Under this new mandate, travelers of nearly all ages will be included.
Contrary to common assumptions about diplomatic privilege, the new rule makes it clear that diplomats are no longer exempt from biometric screening. Previous regulations allowed diplomats to bypass certain biometric collections at the border. The new mandate explicitly removes this exemption, requiring them to provide their biometrics upon both entry and exit from the United States, just like other foreign travelers.
Perhaps one of the most crucial details of the new system lies in how traveler data is stored. While U.S. citizens can voluntarily participate in the facial biometrics process, they also have a clear alternative; those who prefer to opt out may simply notify a CBP officer and undergo a manual inspection of their passport. When a citizen does participate, U.S. Customs and Border Protection (CBP) discards their photos within 12 hours of identity verification.
In stark contrast, for all non-citizens, for whom the process is mandatory, their photos are enrolled in the DHS Biometric Identity Management System—a vast federal database where the data can be retained for up to 75 years. This difference highlights the profound long-term data privacy implications for every non-citizen traveler to the United States.