Data Protection Authority
New arrival and departure system put into use
15th October 2025
The implementation of the new EU Entry Exit System (EES) has begun. The system is expected to be fully operational at external borders of the Schengen area by the end of March 2026.
The aim of the EEA system is to increase the efficiency of border control with an uniformed registration process of movements of people across borders and thus gain a better overview of the stays of individuals from non-Schengen countries.
The system records various personally identifiable data such as name, date and place of birth. In addition, the system records all arrivals and departures together with certain biometric data: facial image and fingerprints. Given the sensitive nature of the personal data, it is important to ensure that individuals can exercise their rights and that the processing of personal data is supervised.
EU Regulation No. 2017/2226, on which the system is based, requires the controller to inform travelers about their rights regarding the processing of their personal data and how they can use them. Controllers who process registered information must therefore ensure that the data subjects can, among other things, easily request access to personal data concerning them, have inaccurate personal data corrected and, where applicable, deleted.
In accordance with the data protection legislation and the provisions of EU Regulation No. 2017/2226, the Data Protection Authority is responsible for monitoring the processing.
You can read more about the system and the involvement of the Data Protection Authority in the on the EDPB website and the EDPS website.