E-visa and electronic travel authorisation data
- US ESTA records
- Biographic data, photographs, social media identifiers, IP address 1
- US ESTA retention
- 15 years for application data 1
- UK ETA fee
- £20 2
- UK ETA retention
- Facial images typically 3 years, biographic data 15 years after last case action 3
- Canada eTA fee
- CAN$7 4
- Kenya ETA fee
- From $30, normal processing up to 72 hours 5
- EU ETIAS start
- Expected in the last quarter of 2026 8
What these systems are
Regulation (EU) 2018/1240 sets up ETIAS for visa-exempt third-country nationals. A travel authorisation becomes a condition of entry, but holding one does not guarantee entry 6. The UK ETA lets people travel to the UK, Jersey, Guernsey or the Isle of Man, and it does not guarantee entry either 2. Canada's eTA covers foreign travellers flying to or transiting through a Canadian airport 4.
India's e-Visa works in two steps. The applicant receives an Electronic Travel Authorization by email, prints it and shows it at an immigration check post, where the e-Visa is stamped in the passport 9. Kenya's ETA asks for a passport, photo, contact details, itinerary and accommodation booking, and states that normal applications take up to 72 hours 5.
What data applicants give
Each official record lists different fields.
| System | Data collected |
|---|---|
| US ESTA 1 | Full name, date and country of birth, passport information, US address, photographs, social media identifiers, eligibility answers, IP address 1 |
| UK ETA 3 | Facial images and biographic and personal data 3 |
| Canada eTA 4 | A valid passport, a credit or debit card and an email address are needed to apply 4 |
| Kenya ETA 5 | Passport, selfie or passport-type photo, email, phone number, travel itinerary, accommodation booking 5 |
| EU ETIAS 6 | Names, surname at birth, date and place of birth, sex, nationality, travel document details, email, current occupation 6 |
| India e-Visa 9 | Photo, passport bio page, return or onward ticket, invitation or hospital letters for business, medical and conference visas 9 |
How long the data is kept
Retention rules were found for three of the six systems. The Canadian, Kenyan and Indian pages checked do not state a retention period 4,59.
| System | Retention |
|---|---|
| US ESTA 1 | Application data and photographs 15 years. Copies in the Automated Targeting System 15 years, in TECS and the Non-Immigrant Information System 75 years. Records linked to a law enforcement matter stay accessible for its life 1 |
| UK ETA 3 | Facial images typically 3 years. Biographic and personal data 15 years after the last case action. Access logs 30 days 3 |
| EU ETIAS 7 | Validity of the authorisation, or five years from the last refusal, annulment or revocation. Up to three more years with the applicant's explicit consent 7 |
Fees and validity
Fees and validity periods as published.
| System | Fee | Validity |
|---|---|---|
| UK ETA 2 | £20 2 | Visits of up to 6 months 2 |
| Canada eTA 4 | CAN$7 4 | Not stated on the page checked 4 |
| Kenya ETA 5 | From $30, plus $100 for expedited processing 5 | Not stated in the FAQ 5 |
| EU ETIAS 6 | EUR 7 in the 2018 regulation 6, EUR 20 announced 17 July 2025 8 | Three years or until the travel document expires, whichever is earlier 7 |
| India e-Visa 9 | Country-specific and non-refundable 9 | e-Tourist 30 days, 1 year or 5 years, e-Business 365 days, e-Medical 60 days 9 |
Sharing, screening and legal basis
The ESTA records notice allows disclosure to foreign law enforcement agencies, to foreign agencies for intelligence and counterterrorism work, and to foreign agencies helping with redress 1.
ETIAS has three parts: an information system run by eu-LISA, a Central Unit in the European Border and Coast Guard Agency, and National Units in each member state 6. Most applications are processed automatically. A National Unit checks any hit by hand, and a refusal cannot rest on automated processing alone 6. Risk indicators cannot be based only on sex or age, or on characteristics such as race, religion or sexual orientation 6.
The UK relies on public task under Article 6(1)(e) of the UK GDPR, and on substantial public interest under Article 9(2)(g) for special category data 3. Its notice says applicants who prefer not to have an automated decision can apply for a Visit Visa instead 3.
When ETIAS starts
On 17 July 2025 the European Commission said ETIAS was expected to start in the last quarter of 2026, with a fee of EUR 20 in place of EUR 7 to cover operational costs 8. People under 18 or over 70 are exempt from the fee 8.
The Commission's ETIAS policy page, dated 6 October 2025, says ETIAS is not yet operational and that the EU will announce the start date several months before launch 10.
Common questions
Does ESTA collect social media details?
Yes. The ESTA records notice lists social media identifiers, such as usernames and platforms used 1.
How long does the UK keep ETA photos?
Facial images are typically kept for 3 years, longer where there are grounds to do so 3.
How much does ETIAS cost?
The 2018 regulation set EUR 7 6. The Commission announced on 17 July 2025 that the fee will be EUR 20 8.
What do I need for a Canada eTA?
A valid passport, a credit or debit card and an email address. The fee is CAN$7 4.
How early can I apply for an India e-Visa?
Up to 120 days ahead for most types, up to 30 days ahead for the 30-day e-Tourist visa, and at least 4 days before arrival 9.
Rules and fees change. Check the official site linked above before you apply or pay. Spotted an error? Email hello@passengerdataexplained.org with the official link.
Sources
- Federal Register: DHS/CBP-009 Electronic System for Travel Authorization System of Records (12 July 2022)
- GOV.UK: Apply for an electronic travel authorisation (ETA) (updated 20 October 2026)
- GOV.UK: Electronic travel authorisation privacy information notice (updated 13 November 2025)
- Immigration, Refugees and Citizenship Canada: Electronic travel authorization (eTA) (modified 5 June 2026)
- Directorate of Immigration Services, Kenya: eTA FAQs (checked 21 October 2026)
- EUR-Lex: Regulation (EU) 2018/1240 establishing ETIAS (2018)
- Regulation (EU) 2018/1240, Articles 36 and 54 (legislation.gov.uk copy)
- European Commission, Migration and Home Affairs: ETIAS will cost EUR 20 (17 July 2025)
- Government of India: e-Visa information, indianvisaonline.gov.in (checked 21 October 2026)
- European Commission, Migration and Home Affairs: ETIAS policy page (6 October 2025)
Related
- EU Entry/Exit System (EES) and ETIAS: data, dates and oversight
What the EU Entry/Exit System and ETIAS collect, official start dates, how long data is kept, eu-LISA's role and EDPS supervision.
- Biometric data at borders
Which fingerprints and facial images border agencies collect from travellers, the legal basis, who holds the records and how long they are kept.
- Passenger data retention
How long governments keep PNR, API and biometric records about air travellers, what must be masked or deleted, and what the EU Court of Justice ruled.
- Kenya passenger data record
What passenger data Kenya collects from airlines and travellers, which agency receives it, how long it is kept, and the US$4.95 API/PNR fee.
- US passenger data rules: APIS, Secure Flight and ATS
How CBP's APIS, TSA's Secure Flight and the Automated Targeting System collect air passenger data, the legal basis, retention periods and audit findings.