A significant shift is looming in the way American citizens will be allowed to enter a large majority of European nations. The European Travel Information and Authorization System (ETIAS), an arm of the European Union, has unveiled its plans to implement a system in Spring 2025, requiring Americans to secure prior approval for travels up to 90 days in any of the 30 EU countries.
This is a departure from the current practice where US travelers enjoy effortless entry into these countries without a visa requirement. However, the new regulation will insist on individuals proceeding with their travels only after registering their intent via the official ETIAS website or mobile application, both of which currently do not process such requests.
In a radical departure from the norm, from 2025 onwards, American passport holders will no longer receive passport stamps. Alarmingly, the planned regulatory changes involve intense intrusions into personal privacy. The new rules state that visitors will be subjected to both face and fingerprint scans aside from surrendering other biometric data. It’s disconcerting that this data will be reserved within the European Commission’s Common Identity Repository (CIR), a database accessed by numerous agencies, including law enforcement.
The implications of this regulation change could be even more disconcerting from a privacy perspective. Critics and advocates of digital privacy have sounded the alarm on not just the possible misuse of this extensive data pool by governments, but also the potential exposure to hacking threats, be they criminal outfits or invasive foreign governments. There’s also the risk of rogue insiders dealing with this sensitive information.
These regulations reflect a worrying escalation towards a surveillance state that doesn’t differentiate between law-abiding citizens and potential threats but treats them both as data sets to be tagged, traced, and retained.
It’s worth noting that the US began collecting fingerprints of international tourists as part of the US-VISIT (United States Visitor and Immigrant Status Indicator Technology) program, which was initiated in 2004.
GDPR protection applies to all EU citizens worldwide and also all people in Europe regardless of nationality. Perhaps also people with no ties to Europe or EU presence who transact with EU organizations.
@grue@lemmy.world’s real problem would be that the GDPR policy is a pushover. It has no teeth and it’s not being enforced for the most part. Complaints under article 77 are ignored. And if you take GDPR offenders to court, you have to pay your legal costs even if you win. You can’t win enough money to even break even.