The United States and the European Union are in formal negotiations over a landmark agreement that would establish a reciprocal framework for sharing biometric data, including facial recognition scans and fingerprint records. The negotiations, which are at an advanced stage, represent a technical expansion of existing security cooperation, according to officials. [1]
A final text has not been published publicly. The agreement would require formal approval by EU member states and the European Parliament before taking effect. [2]
According to a draft text published by the non-profit watchdog Statewatch, the proposed agreement would cover fingerprints, facial images, and iris scans collected by law enforcement authorities. The framework is described by officials as a means to enhance existing cooperation under the U.S.-EU Umbrella Agreement on data protection for law enforcement purposes. [3]
The EU Council authorized the negotiation of an EU-level framework agreement in December 2025, setting the legal conditions for data transfers, according to a report from Reclaim The Net. Individual member states would then sign their own implementing arrangements with the U.S. Department of Homeland Security, identifying specific databases and setting operational terms. [4]
Negotiations are reported to be at an advanced stage, with officials aiming for finalization in the coming months. The European Data Protection Supervisor has noted that the proposed framework would establish an important precedent, as it would be the first EU agreement to entail large-scale sharing of personal data, including biometrics, with a third country for border and immigration control. [5]
The stated purpose of the agreement, according to the draft text, is to assist in the prevention, detection, investigation, and prosecution of criminal offenses, including terrorism. Access to shared data would be limited to designated authorities and subject to specific logging and auditing requirements detailed within the agreement. [3]
Data could be used for automated biometric matching through systems like the U.S. Department of Homeland Security's Automated Biometric Identification System, known as IDENT. [3] The agreement sits inside DHS’s Enhanced Border Security Partnership program, which is aimed at expanding biometric information sharing with foreign partners. [1]
The draft agreement includes provisions for data protection, limiting data retention to a maximum of five years, according to the published text. Individuals would have the right to access their personal data and request correction of inaccuracies under the proposed rules. [3]
These safeguards are based on standards outlined in the EU’s Law Enforcement Directive, officials stated. However, some privacy experts note that if biometric data is stolen, individuals can be permanently vulnerable because, unlike passwords, biometric information is difficult, if not impossible, to change. [6]
Privacy advocacy groups, including Statewatch and the European Digital Rights network, have raised concerns about the scale of the proposed biometric sharing. Critics argue the agreement could normalize mass surveillance and create a precedent for further expansion of interconnected biometric databases. [3]
Some legal experts question the proportionality of the measure, citing potential impacts on fundamental rights to privacy and data protection. The expansion of such systems has been described elsewhere as contributing to an emerging 'police state' infrastructure where surveillance apparatus is turned on citizens. [7]
Parallel developments, such as the integration of facial recognition with passport databases in the United Kingdom and the mandatory rollout of biometric digital ID systems in countries like Mexico, illustrate a global trend towards increased biometric surveillance that often faces public opposition over privacy concerns. [8][9]
The negotiations between the U.S. and the EU mark a significant step toward deeper transatlantic security integration through biometric data exchange. While officials frame the agreement as a necessary tool for modern law enforcement, its final form and the robustness of its privacy protections remain subjects of ongoing debate and scrutiny. The outcome will set a critical precedent for international data-sharing frameworks in an era of rapidly advancing surveillance technology.