EES Biometric Registration
Last verified: 3 min read
What data is collected, how it is stored, and your privacy rights.
What Is Collected
Fingerprints 4 fingers Index and middle finger of each hand
Facial Image Live photo Captured at the border crossing
Passport Data MRZ + chip Name, nationality, document number, expiry
Travel Data Entry/exit dates Location and time of each border crossing
How Long Is Data Stored?
Your EES data is retained for a limited period under strict EU rules:
- 3 years after your last recorded exit from the Schengen Area
- 5 years maximum from the date of your last entry, even if no exit was recorded
After the retention period, your biometric data and travel records are automatically deleted from the central system.
Privacy & Your GDPR Rights
EES is fully subject to EU data protection law (GDPR). As a traveler, you have the right to:
- Access your stored data — request a copy of what is held about you
- Rectification — correct inaccurate personal data
- Erasure — request deletion of your data under certain conditions
- Complaint — file a complaint with a national data protection authority
To exercise these rights, contact the border authority of any Schengen member state, or the EU-LISA agency that manages the system.
Exemptions from Biometric Collection
- Children under 12 — exempt from fingerprint collection (facial image still required)
- Persons physically unable — if fingerprints cannot be collected due to physical condition
- Heads of state and dignitaries — on official visits with diplomatic passports
- EU/EEA/Swiss citizens — not subject to EES at all
What If You Refuse Biometrics?
Providing biometric data is mandatory for EES registration (unless you qualify for an exemption). If you refuse to provide fingerprints or a facial image, you will be denied entry to the Schengen Area. There is no alternative process for travelers who decline biometric registration.
Who Can Access Your Data?
Access to EES data is strictly limited to:
- Border authorities — for verifying identity and checking stay duration at border crossings
- Immigration authorities — for overstay checks and enforcement
- Law enforcement — under specific conditions, for preventing and investigating serious crime and terrorism
- Europol — for cross-border crime investigations under strict data access rules
Airlines, employers, landlords, and private companies have no access to EES data.
Biometric Registration FAQs
What if my fingerprints have changed since my last visit?
If your fingerprints do not match your previous record (due to injury, wear, or aging), the border officer will re-register them. This may take slightly longer but will not prevent entry.
Can I request my data be deleted early?
You can request deletion under GDPR, but the data controller may refuse if the data is still needed for its original purpose (immigration control). Routine requests for early deletion are not guaranteed to be granted.
Is EES data used for mass surveillance?
No. EES is designed for individual border checks and overstay detection. The EU has specific legal safeguards preventing the use of EES for mass surveillance or profiling.
Do children need to provide biometrics?
Children under 12 are exempt from fingerprint collection. A facial image is still captured. Children aged 12 and older must provide fingerprints like adults.
Related Information
Last updated: