New US border rule requires Canadians to be photographed every time they enter… and exit

The United States has officially instated a sweeping new travel rule that requires all non-U.S. citizens — including Canadians — to be photographed each time they cross the border.

The change comes from a final regulation by the U.S. Department of Homeland Security (DHS) that expands the existing biometric tracking system, removing previous exemptions for certain travellers and applying across land, air and sea border crossings.

The new rule was published in the federal register in October and came into effect on Friday.

For Canadians planning U.S. travel — whether a quick border run, a road trip or a full-blown vacation — this shift marks a significant change in how border crossings could feel.

Here’s everything you need to know about how the new U.S. border rule affects Canadian travellers.

What’s changed

Under the new DHS rule, biometric photo collection is no longer limited by age, nationality or to those on their way into the U.S.

The measure gives U.S. Customs and Border Protection (CBP) the authority to collect facial photographs of all non‑U.S. citizens — including Canadians — both when entering and leaving the United States, at airports, land crossings, seaports or any other “authorized point of departure.”

It also scraps previous age‑based exemptions. Children under 14 and adults over 79 — groups that were once often exempt — could now be subject to the requirement.

CBP says the expansion is meant to complete a long-delayed goal to create a nationwide biometric entry-exit system that ensures foreign travellers are accounted for when they enter and when they leave the country.

The agency says facial recognition technology helps cut down on identity fraud, visa overstays and the misuse of travel documents.

No more exceptions for kids

In perhaps the biggest shift from previous rules, effective today, kids under 14 are no longer exempt from biometric screening at the U.S. border. That means Canadian children and even babies crossing into or out of the United States could have their photo taken and stored in the federal database as part of CBP’s identity verification process.

The U.S. government claims the change is meant to fight identity fraud and child trafficking. In some cases, that could mean verifying whether a child being brought across the border matches their travel documents — something that can help uncover situations where unrelated adults pose as parents.

But the rule also reveals a broader purpose: collecting photos of kids now “enables DHS to associate the immigration records created for children to their adult records later,” which could assist in identifying “associations with terrorist or other organizations” later in life, it says.

Before now, the exemption was based on older fingerprint technology and law enforcement practices that didn’t typically include young kids. But because facial recognition doesn’t require physical contact and is already used in other travel settings, DHS now considers it suitable for all ages — and effective starting today.

Your data is stored for life

Under existing regulations, the U.S. government stores all photos and other biometric records collected from non‑U.S. citizens in their database for 75 years.

DHS says this long retention period is necessary to support immigration enforcement, identity management and national security screening throughout a person’s lifetime.

To speed up identity checks, CBP builds custom photo collections called “galleries” using images from its existing database. These galleries are built using photos the U.S. government already has on file — including past border crossings, visa applications, passport photos and other official encounters.

Border officials then use facial recognition technology to match live photos with images from relevant galleries automatically. These galleries can be tailored to different travel patterns, meaning if you’re a frequent traveller or booked on a flight, your photo might be pre-loaded into a set of images used to identify people as they arrive.

Some commenters raised concerns about how long this data would be kept, along with the risks of breaches and misuse. The official response to these concerns was that “numerous federal statutes require DHS to create an integrated, automated biometric entry and exit system that records the arrival and departure of aliens,” and therefore it “cannot delete personally identifiable data and only retain a record of entry-exit.”

DHS says it uses encryption and other controls to limit who can view the data, although other U.S. federal agencies can access it.