VERDICT: CONTEXT NEEDED
In late 2025, DHS published a proposed rule (90 FR 49062) that would fundamentally expand biometric collection to include DNA, iris scans, voice prints, and palm prints - from anyone involved in the immigration system, including U.S. citizens who sponsor family members. Separately, CBP proposed mandatory 5-year social media history and 10-year email history for all ESTA travelers from 42 visa-waiver countries. As of January 2026, these are proposed rules, not final policy. Legal experts anticipate significant Fourth Amendment and First Amendment challenges, with DNA collection for civil applicants likely to be stayed by federal courts.
The Department of Homeland Security is pursuing a "continuous vetting" model that represents the most significant expansion of immigration-related surveillance since the post-9/11 era. The proposed changes affect two distinct populations: immigrant visa applicants (who would face DNA and advanced biometric requirements) and visa-waiver travelers (who would face mandatory social media disclosure).
For the first time, the rules would extend biometric collection to U.S. citizens who file petitions for family members or sign employment documents. The ACLU and other advocacy groups have filed thousands of negative comments, setting the stage for legal challenges that will test the limits of executive authority over both privacy and free speech.
The Two Policy Expansions
The 2025-2026 surveillance expansion consists of two separate administrative actions, each targeting different populations with different data collection requirements.
1. DHS Biometrics Rule (90 FR 49062)
Published on November 3, 2025 as an 84-page proposed rule (Document 2025-19747), this regulation would fundamentally transform what "biometrics" means in the immigration context. The public comment period closed on January 2, 2026, generating 6,661 comments — an extraordinary level of public engagement. [7] Per the Federal Register summary, DHS proposes to "require submission of biometrics by any individual, regardless of age, filing or associated with an immigration benefit request." [7]
| Aspect | Pre-2025 Policy | Proposed 2025 Rule |
|---|---|---|
| Data Types | Fingerprints, photographs | + DNA, iris scans, voice prints, palm prints |
| Age Exemptions | Under 14, over 79 exempt | No exemptions - includes infants |
| Collection Frequency | Once (at visa application) | Recurring until naturalization |
| U.S. Citizens Affected | No | Yes - sponsors and petitioners |
2. CBP ESTA Social Media Mandate
Published on December 10, 2025 as 90 FR 57208 (Document 2025-22461), this revision to the Arrival and Departure Record (Form I-94) and ESTA affects visitors from visa-waiver countries. The comment period remains open until February 9, 2026. The notice has received 72,830 page views on FederalRegister.gov — reflecting intense public interest. [11] [4]
- 5 years of social media identifiers (handles/accounts)
- 10 years of email addresses
- 5 years of telephone numbers
- Biometrics "when feasible" including facial imagery, DNA, and iris scans
- ESTA website decommission: CBP will eliminate the ESTA website, requiring all applications through a mobile-only platform with NFC passport chip verification and liveness detection [11]
CBP justified the mobile-only transition by citing security failures: the National Targeting Center identified over 2,400 poor-quality passport uploads and 8,000 invalid passport photos that bypassed facial comparison screening on the ESTA website. CBP stated it "believes that travelers are aware of this vulnerability and have begun to exploit it by purposely uploading poor quality images to avoid detection." [11]
Legal Foundations Cited by the Administration
The administration cites several authorities to justify these expansions, though legal scholars argue the agencies are exceeding their Congressional mandate: [1]
"Protecting the United States From Foreign Terrorists and Other National Security and Public Safety Threats" — Published in the Federal Register as 90 FR 8451 (Document 2025-02009). [12]
Section 1 states it is U.S. policy to ensure that admitted aliens "do not bear hostile attitudes toward its citizens, culture, government, institutions, or founding principles." Section 2 directs the Secretary of State, Attorney General, Secretary of Homeland Security, and DNI to "vet and screen to the maximum degree possible all aliens" and, within 60 days, identify countries with vetting so deficient as to warrant suspension of admissions under INA Section 212(f). Section 3 required, within 30 days, evaluation of all policies related to grounds of inadmissibility and programs for "proper assimilation" promoting a "unified American identity." [8] [12]
DNA Fingerprint Act of 2005
DHS relies heavily on this statute, which authorized DNA collection from "non-U.S. persons" detained by federal authorities. However, critics note the 2005 law applied to detention contexts, not civil benefit applicants - and certainly not to U.S. citizens. [3]
Section 212(f) of the INA
This provision gives the President broad authority to suspend entry of any class of aliens deemed detrimental to U.S. interests. It serves as the basis for the January 2026 pause on immigrant visas from 75 countries classified as "high risk for public benefits usage." [5]
Rights Impact: What's Already Changed vs. What's Pending
The regulatory landscape has created a two-tier system: rights that have already been impacted by finalized rules, and rights that remain at risk pending the outcome of the proposed rulemaking process.
Rights Already Impacted (Finalized Rules)
- Privacy of Non-Citizens: As of December 26, 2025, a final rule requires nearly all non-U.S. citizens to provide biometric data (photos and sometimes fingerprints) upon both entry and departure
- Digital Privacy for Workers: As of December 15, 2025, H-1B and H-4 visa applicants must undergo an "online presence review" and set social media profiles to public for government inspection
- Citizenship Interpretation: Executive Order 14160 (January 2025) directed agencies to stop recognizing birthright citizenship for children of parents who are unlawfully present or in temporary status
Rights At Risk (Pending Finalization)
- Fourth Amendment Protections: The proposed DNA rule for citizens and infants is viewed by legal experts as a "genetic dragnet." Compelling DNA in a civil, non-criminal context is argued to be an unreasonable search [6]
- First Amendment/Freedom of Expression: Mandatory social media disclosure is expected to have a "chilling effect" on speech, as travelers may self-censor to avoid being flagged by AI tools scanning for "hostile attitudes"
- Right of Association: U.S. citizens' ability to sponsor family members is being conditioned on surrendering biological data to a permanent government database [1]
Judicial Outlook: Key Legal Hurdles
The likelihood of these policies becoming permanent depends on their survival in federal court. The biometrics rule generated 6,661 public comments before its January 2, 2026 deadline — an exceptional volume reflecting deep opposition from advocacy groups including the ACLU and the Institute for Justice. The ESTA revision, with 72,830 page views on FederalRegister.gov, also signals intense public scrutiny. [2] [7] [11]
| Legal Doctrine | Application to 2026 Policies | Likely Judicial Outcome |
|---|---|---|
| Major Questions Doctrine | Agencies cannot claim "highly consequential power" (like national DNA databases) without clear Congressional authorization | Likely to be used to block DNA requirement for U.S. citizens |
| Fourth Amendment | Maryland v. King (2013) allows DNA for serious arrests, but not necessarily for civil benefit applications | Courts may find suspicionless collection from infants and non-criminals unconstitutional |
| Administrative Procedure Act (APA) | Agencies must provide a rational connection between data collected and security goals | Rules may be struck down if found "arbitrary or capricious" |
The Supreme Court ruled 5-4 that DNA collection from serious arrestees does not violate the Fourth Amendment because it serves a legitimate government interest in identification. However, Justice Scalia's dissent warned:
"Make no mistake about it: As an entirely predictable consequence of today's decision, your DNA can be taken and entered into a national DNA database if you are ever arrested, rightly or wrongly, and for whatever reason."
Legal scholars note that King applied to criminal arrests, not civil immigration applications - a distinction likely to be central to any challenge. [9]
Why These Policies Have Generated Concern
The biometrics expansion has drawn criticism from across the political spectrum because it touches on fundamental questions about the relationship between the individual and the state:
Privacy Concerns
DNA is uniquely sensitive because it contains immutable, hereditary information about an individual and their relatives. Unlike fingerprints, DNA can reveal predispositions to diseases, familial relationships, and ethnic ancestry - information with potential for discrimination or misuse.
Mission Creep Fears
Critics point to a pattern of surveillance tools introduced for narrow purposes that subsequently expanded. The proposed rule's extension to U.S. citizens - who are not immigration applicants themselves - represents exactly this kind of scope expansion.
Chilling Effects on Speech
The social media mandate creates incentives for self-censorship. Travelers and visa applicants who know their online activity will be scrutinized may avoid legitimate political speech, association with advocacy groups, or criticism of government policies.
These are PROPOSED rules, not final policy. As of January 27, 2026:
- The DHS biometrics rule (90 FR 49062) comment period closed January 2, 2026 with 6,661 comments submitted. No DNA is currently being collected under this authority. DHS must now review comments before issuing a final rule. [7]
- The CBP ESTA/I-94 revision (90 FR 57208) comment period is open until February 9, 2026. Current ESTA applications do not yet require the proposed changes. [11]
- Legal experts expect federal court challenges if/when these rules are finalized, citing 6,661 negative public comments as evidence of opposition
- The DNA collection provisions are most likely to be stayed pending judicial review
The 2025-2026 biometrics expansion represents a significant policy shift toward continuous surveillance in the immigration system. While the administration frames these measures as necessary for national security, they raise fundamental questions about:
- Whether DNA collection from civil applicants (including infants and U.S. citizens) is constitutional under the Fourth Amendment
- Whether mandatory social media disclosure violates First Amendment protections against compelled speech and chilling effects
- Whether agencies are exceeding their statutory authority under the Major Questions Doctrine
The digital vetting components (social media review, online presence requirements) are likely to proceed more easily than the biological components (DNA collection), which face significant constitutional barriers. Observers expect the DNA provisions to be stayed by federal courts in early 2026 if finalized.