Entry/Exit System: Is Biometric Border Worth the Cost?

Tom Topol © Passport-collector.com Hours

Has the Era of Passport Stamps Come to an End? Europe’s Biometric Border and the Price of 700 Threats in 52 Million Crossings

The EU’s Entry/Exit System (EES) replaced ink passport stamping across 29 Schengen countries on 10 April 2026, collecting fingerprints and facial images from every non-EU national in a centralized biometric database. Whether the enforcement yield justifies that scale of collection is the question this piece examines.

Digital EU border EES System, Europe large
Europ’s New Digital EU border EES System

What the EES Is and What It Replaced

On 10 April 2026, the European Union completed the full rollout of its Entry/Exit System (EES) across all 29 Schengen countries, formally ending more than a century of ink passport stamping. The system replaces passport stamps with digital records of entries and exits of non-EU nationals coming for short stays, capturing facial images, fingerprints, and personal data from each traveler’s document. The infrastructure is operated by eu-LISA, the EU agency responsible for large-scale IT systems, through a fully interconnected system linking central infrastructure with national border systems across Europe. European Commissioneuropa

By any measure, it is one of the most ambitious surveillance architectures ever built for peacetime border management. The EU’s own deployment statistics deserve more scrutiny than they have received.

The Numbers: What Six Months of EES Actually Produced

Between October 2025 and April 2026, the EES registered over 52 million border crossings. Entry was refused more than 27,000 times, including to almost 700 people who were identified as posing a security threat to the EU. Several thousand additional travelers were flagged for overstaying the Schengen 90/180-day rule, though the Commission has not released a precise overstay count as a separate category from total refusals. gulfnews

EU Commissioner for Internal Affairs Magnus Brunner stated at full deployment: “With the EES, we are taking control of who enters and leaves the EU, when and where.” gulfnews

Framed differently, these numbers describe a mass biometric apparatus collecting fingerprints and facial images from tens of millions of law-abiding travelers to intercept a population measured firmly in the per-mille range: 0.052% refused entry, 0.0013% flagged as a security threat.

The question is not whether the EES caught anything. It is whether what it caught justifies what it costs: in financial terms, in operational disruption, and in the permanent erosion of informational privacy for hundreds of millions of innocent travelers.

A Century of Stamping: What Was Lost

To understand what the EES replaced, it helps to understand what the stamp actually was.

The modern passport stamp is a product of the post-World War I international order. Before 1914, passports were largely optional across most of Europe. Emergency travel controls introduced between 1914 and 1918 hardened into permanent administrative practice. The 1920 Paris Conference on Passports and Customs Formalities attempted to standardize a chaotic patchwork of national systems. The rubber stamp became the universal solution: simple, tactile, and legible to any officer at any crossing.

For historians and collectors, stamps function simultaneously as bureaucratic records and as primary sources, a dense cartography of geopolitical relationships and visa regimes encoded in ink, held by the traveler and belonging to no one else. Tom Topol, passport historian and editor of passport-collector.com, examined this transition in depth in his LinkedIn essay on the end of a century of passport stamping.

The EES ends all of that. The record of a crossing no longer lives in the traveler’s hands. It now lives in a centralized eu-LISA database, accessible to border authorities and law enforcement agencies. europa

Three Genuine Operational Gains

The EES delivers three operational advantages the stamp system could never provide.

Cross-border refusal sharing. Under the old system, a traveler refused entry at Frankfurt airport could drive to Amsterdam and try again. Border officers had no real-time mechanism to check refusals by other member states. Under the EES, a refusal is logged centrally and any subsequent crossing attempt triggers an alert, regardless of which country it is made in.

Identity fraud detection across multiple documents. The Romanian case cited by the European Commission is instructive: biometric matching revealed that a single traveler had been using two separate identities with two separately issued passports and had been refused entry three times by different member states. The stamp-based system had entirely failed to catch this across multiple prior entries. Fingerprints do not lie the way paper does.

Automated overstay calculation. The EES replaces manual passport stamping and enables automatic detection of overstayers who have exceeded the maximum duration of their authorized stay. Under the stamp system, officers had to manually count dates across heavily stamped pages, with faded ink and arithmetic errors producing inconsistent enforcement across 29 countries. European Commission

These are real gains. The question is whether they are proportionate to the scale of collection.

The Proportionality Problem: What EU Law Requires

EU law requires that any high-risk data processing be strictly necessary and that no less intrusive alternative exists. This is not a soft guideline. Under GDPR Article 35, a Data Protection Impact Assessment must justify the necessity, suitability, and proportionality of any system processing biometric data at scale.

The legal precedent is instructive. In November 2024, the Spanish Data Protection Agency (AEPD) imposed a fine of €10.04 million on AENA (Spanish Airports and Air Navigation) for implementing facial recognition systems in eight Spanish airports without conducting a valid Data Protection Impact Assessment, noting that less intrusive alternatives existed. The AEPD’s ruling, covered in detail by Biometric Update, found that AENA had failed to demonstrate that biometric data was necessary compared to alternatives such as QR codes and document scans. PierNext

The EES applies that same biometric framework to an incomparably larger population, and the proportionality argument is not holding up well under legal scrutiny.

German Bundestag member Clara Buenger has stated publicly that “the EU is merging massive databases without oversight and undermining the constitutional restrictions on data use,” arguing that law-abiding travelers are subjected to mass surveillance and that the line between migration and criminal prosecution is being blurred. Biometric Update

Legal researcher Samay Jain, writing for the European Law Blog, argues that through its integration with the Visa Information System (VIS), ETIAS, and the shared Biometric Matching Service (sBMS), the EES builds a generalized biometric surveillance architecture aimed at an entire class of people with a structural logic that resists any principled proportionality analysis. The integration allows law enforcement authorities and Europol to access biometric data during investigations into terrorist offenses and “other serious crimes.” That phrase is broad enough to offer no meaningful limits in practice, Jain argues. European Law BlogBiometric Update

The biometric architecture is, in his assessment, constitutively disproportionate: built in a way that makes proportionate use structurally impossible. Read Jain’s full argument at the European Law Blog.

The access creep risk is real and documented. The EES was designed for border management. It is already integrated with criminal investigation databases. The distance from border control to domestic surveillance is shorter than its architects publicly acknowledge. Further legal and operational analysis of this question is available via Biometric Update’s coverage of EES proportionality scrutiny.

The Operational Reality: Queues, Glitches, and Reversions

If the proportionality debate is abstract, the operational results are not.

Since launch, airports including Paris Charles de Gaulle, Amsterdam Schiphol, and Frankfurt have reported congestion during peak periods, prompting the European Commission to allow temporary suspension of biometric collection when queues become unmanageable. Portugal suspended the system’s use at Lisbon Airport in December 2025 after widespread delays. Travel industry sources reported delays of five to six hours at major European airports including Amsterdam, Lisbon, and Milan, with some passengers missing connecting flights. Gulf News + 2

Member states can partially suspend EES checks for up to 90 days after the rollout is complete, with a possible 60-day extension, specifically to manage summer travel congestion. ETIAS

That provision is a tacit admission that the system is not yet operationally ready for peak-period volumes. If a border security system designed to increase efficiency requires temporary suspension to avoid gridlock, the efficiency argument has a problem.

The EU Council’s explainer on how the EES works and the PierNext analysis of EES implementation at European ports both confirm the operational complexity involved in the system’s real-world deployment.

The Deterrence Counterargument: Valid but Unverifiable

The EU’s primary response to the proportionality challenge rests on deterrence: a system that prevents violations never shows those prevented violations in the statistics. If would-be identity fraudsters no longer attempt crossings because they know biometrics will catch them, that deterred population is invisible in the data.

This is a legitimate argument. It is also entirely unverifiable, and it has historically been used to justify the expansion of every surveillance system ever built. The absence of evidence of deterrence is not evidence of absence, but it is not a legal justification for mass biometric collection from tens of millions of innocent travelers either.

The deterrence argument also does not engage with the data retention question. Biometric records under the EES are stored for three years from the last recorded crossing. A traveler who visits the Schengen Area once leaves behind a biometric profile that persists for three years. Multiplied across millions of annual visitors, the database grows into a persistent large-scale biometric inventory of non-EU nationals with no offense record whatsoever.

The Stamp as a Privacy Architecture

What the stamp represented, beyond its bureaucratic function, was a specific distribution of information. The traveler held the record. The state pressed a mark and returned the document. That mark was visible to subsequent officers but contained only what ink could contain: a date, a location, a coded visa category. It could not be searched across jurisdictions. It could not be cross-referenced against a criminal database in real time.

That architecture had weaknesses. Forgery was possible. Exit stamps were missed. Overstays went undetected. These are the weaknesses the EES correctly addresses.

But those weaknesses existed at the margins, as the EES’s own first-six-month results confirm. The stamp system failed at the edges. The EES collects from everyone to catch failures at the edges.

The transition is not simply from a less accurate system to a more accurate one. It is from a system that collects minimally to one that collects maximally, from a record that belonged to the traveler to one that belongs to the state.

What Comes Next: ETIAS and the Layering Problem

The EES is explicitly described by the European Commission as the foundation for the European Travel Information and Authorization System (ETIAS). ETIAS is expected to launch towards the end of 2026, though a date has not yet been confirmed and applications cannot currently be submitted. When operational, it will require visa-exempt travelers from over 60 countries, including the UK, US, and Australia, to obtain pre-travel authorization before boarding, at a cost of €20 per application valid for three years, with applications screened against EU security databases before approval. ABTA

EES is separate from but connected to ETIAS, which will require non-EU nationals to register travel authorization before visiting the Schengen Area. ETIAS

When ETIAS is operational, the sequence for a non-EU traveler will be: pre-screened before departure by ETIAS, biometrically logged on arrival by EES, and automatically tracked against the 90-day limit throughout the stay. The passport, once the primary document of sovereignty and identity at the border, becomes a scan token: a number that activates a database record.

This layering is deliberate. Each system is presented as a targeted response to a specific gap. Cumulatively, they construct a pervasive monitoring architecture covering the full lifecycle of a non-EU national’s presence in Europe: before arrival, at entry, throughout the stay, and at exit.

The question of proportionality does not get easier as the layers accumulate. It gets harder.

A Conclusion Without Easy Resolution

None of this argues that the EES should not exist. Identity fraud at borders is real. Overstays impose genuine administrative and social costs. Coordinated cross-border refusal sharing is a legitimate security objective. The Romanian dual-identity case alone demonstrates that the stamp system had genuine blind spots.

But the enforcement yield of the first six months, measured honestly against the scale of collection, does not support the claim that mass biometric registration of innocent travelers was the only way to address those blind spots. Less intrusive architectures, such as targeted biometric collection for flagged travelers, enhanced inter-agency data sharing, and improved officer training, were not demonstrably exhausted before the decision was made to collect from everyone.

What the EES has produced, in its first phase, is a database containing the biometric profiles of tens of millions of people who did nothing wrong, stored for three years, accessible to law enforcement under broad conditions, built on infrastructure designed for expansion, with the next layer already scheduled for deployment before the first has been independently evaluated.

The stamp that pressed into a billion passport pages over a hundred years was imperfect. But it was also bounded. It recorded what it needed to record and returned the document to its owner.
The system that replaced it records far more, retains it far longer, and returns nothing at all. That is a civilizational change. It deserves a proportionality argument more robust than 700 security threats in 52 million crossings.

Sources

 

Tom Topol, passport history expert

Tom Topol | Passport Historian & Author
Featured by CNN, BBC, Newsweek... Awarded by the U.S. Dept. of State
Ask | Recognition | Books | Set as preferred source

More fascinating articles...