(EUROPEAN UNION) The European Union is moving toward granting the United States direct access to EU police databases and immigration systems under a proposed Enhanced Border Security Partnership (EBSP). Published quietly by the European Commission at the end of July 2025 and now drawing sharp debate, the plan would let U.S. agencies, including the Department of Homeland Security (DHS), run automated checks against vast stores of biometric and personal data.
Officials frame it as a way to spot security risks faster. Critics warn it could upend privacy rules that anchor EU law.

Policy proposal and access scope
The Commission released the EBSP proposal without a press conference and did not table it for open discussion at the Justice and Home Affairs Council on the same day. That low-key rollout belies the scale of the change.
The draft foresees giving DHS and certain other U.S. bodies a pipeline into core EU and national systems that handle asylum, visas, border checks, and policing. Under the EBSP, U.S. systems could send biometric or biographic search requests and receive matches in seconds, with minimal human involvement. That would be a step beyond the current patchwork of bilateral or case-by-case sharing.
The text names several large-scale IT platforms where direct access could apply or be mirrored through automated queries:
- Eurodac — stores asylum and migration fingerprints
- Schengen Information System (SIS)
- Visa Information System (VIS)
- Entry/Exit System (EES)
- European Travel Information and Authorization System (ETIAS)
- European Criminal Record Information System for Third-Country Nationals (ECRIS‑TCN)
This proposal would also align with broader EU security pushes to link datasets and improve cross-border checks, including efforts on encrypted communications and data retention rules.
As of August 29, 2025, the Commission has placed the file in early consultation, with a data protection impact assessment expected before any signature. For official background on these systems and EU border policy, readers can review the European Commission’s materials on ETIAS and related databases on the Commission’s home affairs portal at European Commission – ETIAS policy.
Privacy and legal debate
Privacy advocates and many migration lawyers argue the EBSP risks pushing EU law beyond its limits. Their core concerns include:
- Conflict with the General Data Protection Regulation (GDPR) and Court of Justice rulings on necessity and proportionality.
- Tension with the EU–US Umbrella Agreement, which governs law enforcement data transfers but does not permit systematic, always-on access.
Some officials within the bloc emphasize benefits: faster hit/no-hit replies that could block known offenders from boarding flights to the U.S., and improved tools for return operations when U.S. fingerprints match records in Eurodac or SIS. Others fear mission creep: once a channel exists, limiting the purposes or number of agencies that can use it becomes difficult.
Legal services in Brussels are expected to examine whether the EBSP can fit inside existing EU secondary law for each database, or whether a new horizontal regulation is needed. The Belgian presidency of the Council has suggested fresh legislation to standardize data exchange and retention that the partnership would require. That raises questions about national sovereignty, since many records sit in national repositories even when they feed EU platforms.
Data protection groups press practical rights concerns, not just legal theory:
- If a traveler is refused boarding or a visa because a U.S. system found a match in an EU file, how will that person learn which database triggered the decision or how to correct an error?
- Several countries have struggled to offer clear, fast ways to access and fix records; campaigners point to Italy’s uneven record on enforcing data rights as an example of where gaps may widen under EBSP.
Analysis by VisaVerge.com highlights that EBSP would mark the first time U.S. authorities could gain a pathway to systematic, near-real-time checks across multiple EU systems at once, rather than separate requests handled by each country. The review emphasizes potential effects on visa vetting, asylum screening, and removal cases where cross-Atlantic matches could tip decisions.
Key legal and privacy takeaway: Allowing a non-EU government automated access to EU policing and immigration systems raises deep questions about proportionality, transparency, remedy rights, and alignment with existing EU law.
Impact on people and governments
For individuals:
– For travelers, students, and workers bound for the United States, direct access means fingerprints or travel history held in the EU could be checked almost instantly by DHS when applying for a visa or boarding a flight.
– If a record contains an error, you could face delays or denial in the U.S. while trying to fix a database entry stored in Europe.
– Asylum seekers could see their Eurodac entries queried more often, linking their cases to U.S. enforcement databases.
For airlines and intermediaries:
– Carriers may face new pre-departure checks if the U.S. requests more advance screening tied to EU hits.
– A faster feedback loop could shift compliance pressure earlier in travel, at check-in counters across Europe.
For EU member states:
– Expect costs to adapt national systems, draft implementing laws, and appoint contact points to respond when U.S. queries flag problems.
– Several capitals will likely insist on strong audit logs, limits on purpose, and the right to suspend access if abuses occur.
– The shared goal of stopping dangerous actors will keep the political door open, even as details remain contested.
Arguments from both sides:
– U.S. officials argue quicker checks save lives and prevent fraud, saying real-time matching helps stop identity swapping and catch people using different names. They claim automated exchanges can reduce manual data pulls and the number of officers who see personal files.
– Opponents warn that automation can scale errors rapidly. False biometric matches are hard to challenge, especially for people with language or legal hurdles. They demand:
– Clear rules for notification, appeal, and deletion
– Independent oversight able to suspend access if terms are breached
One near-term legal question is whether the Commission will propose a dedicated regulation to operationalize the EBSP or rely on existing legal bases tied to each system. Eurodac, VIS, SIS, EES, ETIAS, and ECRIS‑TCN all have specific rules about who can query data, for what purpose, and for how long records are stored. Any shift to allow foreign government queries will require careful legal drafting and likely Court review.
Even supporters acknowledge transparency matters. The proposal’s low profile so far—no press event and minimal Council debate—has fueled suspicion. Opening the file to a broader public review, with clear descriptions of what will and won’t be shared, would reduce confusion and help people plan travel or study without surprises.
Required guardrails and next steps
Negotiators will have to weigh security benefits against privacy risks and design clear protections, including:
- Strict purpose limits for queries
- Audit trails and logging of access
- Data minimization and retention limits
- Effective remedies for people harmed by wrong hits
- Independent oversight with the power to suspend access if abuses occur
There is currently no public timeline. The Commission has placed the file in early consultation and expects a data protection impact assessment before signature. How the EBSP proceeds will determine practical impacts for travelers, carriers, and national authorities.
Warning: Without robust guardrails and transparency, trust in cross‑border data sharing will be hard to build—and individuals may face unexpected denials or delays based on hard-to-challenge automated matches.
Practical advice for travelers
If you expect to travel to or apply for a visa to the United States, consider these steps now:
- Keep copies of visa or boarding decisions.
- If you spot an error, ask the national data authority to fix it.
- When applying to the United States, disclose prior refusals clearly.
If denied boarding after a watchlist hit, ask the airline for the reason code; it may help you seek correction later.
For background on the EU systems mentioned and official policy context, see the Commission’s ETIAS and related materials at European Commission – ETIAS policy.
Frequently Asked Questions
This Article in a Nutshell
The European Commission’s EBSP proposal, published in July 2025, would permit U.S. agencies to perform automated queries against major EU migration and policing databases — including Eurodac, SIS, VIS, EES, ETIAS and ECRIS‑TCN — enabling near‑real‑time biometric and biographic matching. Proponents stress improved security screening, faster detection of fraud and streamlined return operations. Opponents raise legal and privacy concerns, citing potential conflicts with GDPR, the EU–US Umbrella Agreement and Court of Justice standards on necessity and proportionality. The Commission placed the file in early consultation and expects a data protection impact assessment before any signature. Key operational questions include legal basis for access, audit logs, purpose limits, remedies for individuals harmed by erroneous matches, interoperability costs for member states, and independent oversight to suspend access if abuses occur.