Starting in 2026, the CBP has implemented significant new requirements for ESTA family data that fundamentally change what information applicants must disclose about their relatives, marking one of the most substantial expansions of the ESTA application process since its inception. These new ESTA family data requirements now demand detailed information about your immediate and extended family members, including names, dates of birth, residential addresses, phone numbers, and employment information. Get any of it wrong and the application gets rejected. That is why the details matter. Beyond the paperwork itself, all this data collection raises real privacy and data-protection questions that international travelers should weigh before they hit submit. This guide walks through exactly what ESTA family data CBP requires, why they’re collecting it, how to prepare your information, and what privacy protections exist for your data.
The shift toward comprehensive ESTA family data collection is CBP’s effort to build more detailed security profiles of travelers and spot potential risks through family network analysis. Below, we help you gather the right data and handle the new requirements with confidence.
What Exactly Is ESTA Family Data That CBP Now Requires?
ESTA family data refers to detailed information about your immediate and extended family members that you must now provide when applying for ESTA authorization. That is a dramatic jump. In previous years applicants only had to list emergency contacts. Knowing the specific requirements upfront is what keeps an application on track.
Here is the complete list CBP now expects you to hand over:
| Family Member Category | Information Required | Examples |
|---|---|---|
| Parents (both) | Full name, DOB, country of residence, current occupation | Mother and father regardless of living status |
| Siblings | Full name, DOB, country of residence, occupation | Brothers and sisters (biological and half-siblings) |
| Spouse/Partner | Full legal name, DOB, nationality, occupation, residency | Current spouse or registered civil partner |
| Children | Full name, DOB, nationality, country of residence | All biological and legally adopted children |
| Grandparents | Full name, DOB, nationality, country of residence (if alive) | Paternal and maternal grandparents |
| Phone numbers | 5 years of your personal phone history | All mobile and home numbers used |
The requirements now reach far beyond what CBP used to ask for. None of this was required in prior years, so returning applicants will notice the change immediately. And the depth of it—stretching all the way out to grandparents—marks an unprecedented level of family information collection by CBP.
Parent Information Requirements in ESTA Family Data
Your parents are the first and most critical ESTA family data requirement in the new 2026 system. CBP wants complete information for both biological parents, even if they are deceased, divorced, or estranged. Here is what you’ll need to provide:
- Mother’s full legal name (including maiden name if applicable)
- Mother’s date of birth
- Mother’s current country of residence
- Mother’s current occupation or employment status
- Father’s full legal name
- Father’s date of birth
- Father’s current country of residence
- Father’s current occupation or employment status
If either parent is deceased, you still list their information and mark them as deceased. Divorced or separated parents? List both, each with their current residency details. And if you were adopted and don’t know your biological parents, CBP lets you say so—though flagging that can trigger additional review of your file.
CBP uses the parent data for security background checks and network analysis. The information gets cross-referenced against their databases to surface any security concerns or links to flagged individuals. Get a name or date wrong here and processing slows down—accuracy is what keeps things moving.
Sibling Information for Complete ESTA Family Data
Sibling information is one of the bigger new additions to the requirements. CBP now wants details on every brother and sister you have, half-siblings included. All of it feeds into the complete family network profile they build for each applicant.
For each sibling, provide the following ESTA family data:
- Legal name in full
- Birth date (day/month/year)
- Where they live now (country)
- What they do for work
- Nationality, if it differs from yours
- Any information about dual citizenship
CBP asks about all siblings, not just the ones back home. Siblings living abroad still need complete records. Haven’t spoken to a brother in years? You list him anyway. Half-siblings from a parent’s earlier relationship count too. In short, the scope covers your entire sibling network, wherever in the world they live.
Spouse and Partner Information in ESTA Family Data
If you are married or in a registered civil partnership, CBP requires extensive data about your spouse or partner. It helps them establish your family ties and residential patterns. Provide the full set of details:
- Spouse’s full legal name
- Birth date
- Nationality plus where they live
- Job title and employer
- Phone number (current contact)
- Email address (if available)
- Residential address
Divorced or separated but not yet finalized? CBP wants information on both your ex-spouse and your current partner, if you have one. Common-law partners and unmarried cohabitants have to be acknowledged as well, even without a marriage certificate. All of it helps CBP verify your residential stability and ties to specific countries, which feeds directly into your travel risk assessment.
Children Information and ESTA Family Data Requirements
If you’re a parent, you provide records for all your children, both biological and legally adopted. Age doesn’t matter—a newborn and an adult child are both listed. So are children who live with you and children who live somewhere else.
For each child, collect and submit the following ESTA family data:
- Complete legal name
- Birth date
- Country they reside in today
- Nationality
- Passport number (if available)
- School or daycare name (for minor children)
- Any special needs or medical conditions that might affect US travel
CBP collects data on children to identify dependents who might travel with you and to read your family structure. It also helps them work out your visa classification needs. And if custody is disputed or guardianship is contested, these records become especially important for establishing your travel rights.
Extended Family and Grandparent ESTA Family Data
One of the more surprising additions is the request for grandparent information. CBP now asks about both paternal and maternal grandparents, provided they’re living. If yours are still alive, you’ll need to supply the full set of details:
- Full names of all living grandparents
- Dates of birth
- Countries of residence
- Current occupations or retirement status
- Nationalities
If a grandparent has passed away, you mark that on the form. Never knew a grandparent, or simply don’t have the details? You can select “information unknown,” though be aware it may prompt a follow-up inquiry. The point of all this is to build a fuller family history and flag any ties to countries of concern or to individuals already under a security flag. That’s why getting the grandparent details right still matters.
Why CBP Requires This Extensive ESTA Family Data in 2026
From CBP’s side, the expansion serves several security objectives at once. Knowing the reasoning makes the requirements a lot easier to swallow. CBP has publicly given several reasons for collecting this much family data:
- Network security analysis: CBP uses family connections to identify networks of individuals with security concerns
- Fraud detection: Family information helps detect identity fraud and application inconsistencies
- Background verification: ESTA family data allows cross-referencing with international databases
- Risk assessment: Family ties to certain countries or regions influence security scoring
- Biometric screening: Family relationship validation helps confirm biometric consistency
- Visa fraud prevention: ESTA family data deters applicants from providing false information
CBP’s argument is that a fuller picture yields a more accurate risk assessment. A relative’s background, job, and place of residence can, in their view, hint at an applicant’s reliability and intent. By that logic, the expanded requirements sharpen the agency’s security decisions.
Privacy Concerns Regarding ESTA Family Data Collection
The expanded collection has set off real alarm among international travelers and privacy advocates. European data-protection authorities have openly questioned whether gathering this much family data is even legal. The GDPR, and comparable laws elsewhere, may sit in direct conflict with what CBP is demanding.
Key privacy concerns about ESTA family data include:
- Vast collection of personal information about non-traveling family members
- Little transparency about how the collected data gets used and stored
- Risk of data breaches exposing sensitive family information
- International data transfer from EU to US servers
- Indefinite data retention without clear deletion schedules
- Potential misuse of ESTA family data for targeted marketing or surveillance
- Non-EU citizens potentially unable to refuse ESTA family data submission
Several countries have already lodged formal complaints with US authorities over these collection practices. Privacy organizations keep pushing for hard limits on how much data is gathered and how long it’s held. CBP insists the collection is necessary; the fight over where privacy protections should land is far from settled.
Data Storage and Security of ESTA Family Data
CBP stores the data on secure servers behind encryption and access controls. Per its privacy policy, records are kept for a minimum of 5 years from the application date—and longer if a security flag comes up. The data is also shared with other US agencies, including DHS, FBI, and ICE, for verification. Worth remembering: once you submit, your family details circulate well beyond CBP alone.
CBP has implemented the following security measures for ESTA family data:
- Encryption of ESTA family data in transit and at rest
- Multi-factor authentication for system access
- Restricted access to ESTA family data on need-to-know basis
- Regular security audits and vulnerability assessments
- Compliance with federal information security standards
Notably, while CBP implements security measures, no system is completely immune to breaches. Therefore, understand that submitting ESTA family data involves some inherent privacy risks.
What If You Don’t Know or Can’t Provide Certain ESTA Family Data?
Can’t pull together complete records for every relative? The application gives you options. CBP accepts that some applicants simply won’t have access to every requested detail. Here is how to handle the gaps:
- Marking “Information unknown” if you genuinely lack the data
- Providing estimated dates of birth if exact dates are unavailable
- Using maiden names or alternate names if unsure of current legal names
- Noting estrangement or lack of contact if you have no current information
- Explaining special circumstances like adoption or guardianship situations
Be careful here: deliberately leaving out or falsifying family data can get your application denied or trigger a fraud investigation. Give the most complete, accurate answers your genuine knowledge allows. If your situation is complicated—divorced parents, step-siblings, adoptive relationships—spell those relationships out plainly in the application. Honesty about your family structure always beats trying to hide or omit something.
Preparing and Organizing Your ESTA Family Data Before Application
Before you start the application, pull all the required family data together first. Doing the legwork in advance is what prevents delays and rejections. Run through this checklist as you prepare:
- Collect full legal names of all family members exactly as they appear on official documents
- Gather dates of birth for all required family members
- Confirm current countries of residence for each person
- Identify current occupations or employment information
- Verify nationalities, especially for dual-national family members
- Document your 5-year phone number history
- Prepare an explanation wherever a required detail is unavailable
- Review for consistency with information in your own application
Therefore, dedicating time to organize ESTA family data before applying significantly streamlines the application process and reduces rejection risk.
Frequently Asked Questions About ESTA Family Data
What is ESTA family data exactly?
ESTA family data comprises detailed information about your immediate and extended family members, including parents, siblings, spouse, children, and grandparents with names, dates of birth, residency, occupations, and contact information.
Do I have to provide ESTA family data about deceased family members?
Yes, if a parent or grandparent is deceased, you still list them in your ESTA family data and indicate their death status as part of comprehensive family history profiles.
What if my family situation is complex?
Clearly explain your family structure in ESTA family data sections. CBP accommodates adoptive relationships, blended families, and guardianship situations with transparency about your specific circumstances.
Is my ESTA family data shared with other governments?
ESTA family data is shared among US government agencies (DHS, FBI, ICE). CBP generally does not share ESTA family data with non-US governments except in law enforcement cooperation for specific criminal investigations.
How long does CBP retain my ESTA family data?
CBP retains ESTA family data for a minimum of 5 years from application. If flagged for security concerns, retention may be indefinite.
Can I update my ESTA family data after approval?
You can update ESTA family data when renewing after 2 years. For significant changes like divorce or new children, consider early renewal with updated family information.
What if I refuse to provide ESTA family data?
Refusing required ESTA family data results in automatic application denial. CBP will not process applications lacking mandated family information—it is mandatory.
Is ESTA family data required for child applicants?
Yes, even children applying for ESTA must provide their own ESTA family data including information about parents, siblings, and other family members.
Summary: Navigating ESTA Family Data Requirements
Getting your family data straight is the difference between a smooth 2026 ESTA application and a rejected one. The expanded requirements are a real break from previous years. Organize everything ahead of time and the rest of the process falls into place.
For detailed ESTA application instructions and additional requirements, explore our guides on ESTA application, ESTA requirements, and ESTA for families. For the official word on the requirements and how your data is handled, check travel.state.gov and cbp.gov. Have a privacy concern? Reach the DHS Privacy Office directly.
Related ESTA and USA Travel Guides
For more on ESTA, the Visa Waiver Program, and practical US travel tips, browse these related guides from our library. Each one adds country-specific details, step-by-step walkthroughs, and cost breakdowns that pick up where this article leaves off.
- Czech citizens ESTA
- Norwegian ESTA guide
- Slovak ESTA guide
- Danish ESTA guide
- Portuguese ESTA requirements
- what to do if your ESTA is denied
- Dutch ESTA guide
- Lithuanian ESTA requirements
Last updated: April 2026. Information verified against official CBP travel, U.S. State Department, and DHS sources.