But the attention on the plight of holidaymakers overlooks a much bigger and far more consequential story.\u00a0 <\/p>\n
The EES, together with the European Travel Authorisation System (ETIAS), is part of a broader push to technically integrate databases across migration and public security. <\/p>\n
Europe is quietly building the most extensive digital border surveillance infrastructure in its history \u2013 one that people can neither see nor challenge.\u00a0<\/p>\n
The two systems serve different functions. Whereas the idea behind EES is to automate entry and exit records through biometric data collection, ETIAS aims to pre-screen who is or is not fit to enter the European Union based on criteria assessed by a score: risk to public health, risk to security, and risk of illegal immigration.<\/p>\n Together, the systems are capable of screening\u00a0more than 1.4 bn travellers<\/a>, and will be integrated into searchable profiles combining biometric, migration, visa, and law-enforcement data.<\/p>\n The logic behind this framework,\u00a0as envisioned by the EU<\/a>, is \u2018simple\u2019: integrate the different databases for immigration, asylum, and policing, so that it becomes relatively easy for police, law enforcement, or migration authorities to pull information from across them.\u00a0<\/p>\n The ETIAS assessment is carried out by an automated profiling algorithm within certain shared criteria across member states \u2013 but how this will work in practice remains somewhat unclear. Risk indicators may include age, sex, nationality, country of residence, level of education, and occupation. <\/p>\n And while the use of data revealing protected characteristics \u2013 like race or social origin \u2013 is prohibited, it is not clear how these will not end up being inferred by the system itself in any way: nationality can function as proxy for racial or ethnicity origin, patterns of residence for socioeconomic status, and educational credentials for social class and background.\u00a0<\/p>\n Inside \u20ac1.99bn in EU-LISA contracts<\/p>\n At the centre of the roll-out for this system sits EU-LISA (EU Agency for the Operational Management of Large-Scale IT Systems in the Area of Freedom, Security and Justice), a little-known agency in Tallinn, responsible for designing, developing, and building Europe’s digital borders.<\/p>\n At ARTICLE 19, we analysed \u20ac1.99bn in EU-LISA contracts to shine a light on infrastructures that too often stay\u00a0hidden, fading into the background without proper scrutiny.\u00a0\u00a0 <\/p>\n Our analysis uncovered how companies including IDEMIA, Sopra Steria, IBM, and Leonardo SpA, among others, are shaping these systems. Because of the way EU-LISA procurement operates, private companies are gaining real influence over what the systems can do and recommend, through large building blocks of biometrics, engineeringm, and operations.\u00a0<\/p>\n This means that, in practice, surveillance capacities within EES and ETIAS could be expanded through \u2018technical adjustments\u2019 rather than accountable political decisions. <\/p>\n Companies can suggest forms of \u2018evolutionary maintenance\u2019 to the systems, which can create loopholes for new functionalities \u2013 such as enhanced biometric matching. <\/p>\n These companies are also part of an industry that spans global digital IDs, defence and security projects worldwide: IDEMIA, for instance, develops and implements national biometric identification systems in countries including\u00a0Morocco<\/a>,\u00a0Chile<\/a>, and\u00a0Colombia<\/a>, as well as election management technologies in\u00a0Kenya<\/a>. How these technologies travel across contexts deserves further scrutiny.\u00a0<\/p>\n Surveillance at scale<\/p>\n This new scale of digitalisation at the borders has real-life consequences. For migrants and people on the move, participation in these systems is not optional: biometric registration and automated assessment are conditions for mobility or legal status. <\/p>\n A mistake in one database can cascade across interconnected systems, leading to delayed or denied entry, visa refusals, disrupted family life, or barriers to work, with little transparency about how decisions were made or how to challenge them. <\/p>\n Beyond this, many migrants lack the linguistic, legal, and financial resources required to exercise those rights.\u00a0<\/p>\n How these systems will classify people in the long term, what further changes may still come, and how people will be able to question or request access to this information all remain unclear. <\/p>\n What is clear is that development of effective accountability mechanisms lags further and further behind, just as the scale and pace of deployment of surveillance technologies accelerates.\u00a0<\/p>\n Individuals\u2019 rights and freedoms should not be subordinated to commercial interests, and strengthening rights mechanisms and transparency for migrant populations requires protective frameworks designed for the conditions they face. <\/p>\n While existing frameworks \u2013 including the General Data Protection Regulation<\/a> and the AI Act<\/a> \u2013 formally apply to these systems, they are often applied inconsistently,\u00a0with many exceptions for migration and law enforcement<\/a>.\u00a0<\/p>\n![\"\"](\"https:\/\/www.europesays.com\/uk\/wp-content\/uploads\/2026\/08\/pexels-connor-danylenko-534256-2612113-600x400.jpg\")
<\/a><\/p>\n![\"\"](\"https:\/\/www.europesays.com\/uk\/wp-content\/uploads\/2026\/08\/IE-SURVEILLANCE-HERTA-600x338.jpg\")
<\/a><\/p>\n
![\"\"](\"https:\/\/www.europesays.com\/uk\/wp-content\/uploads\/2026\/08\/53706873301_63efedb41c_o-2-600x360.jpg\")
<\/a><\/p>\n