Who can see your EES record? Police, Europol, airlines

Border, visa and immigration officers in the countries using EES can see your record. Police and Europol can search it only for terrorist offences and other serious crime, through a separate request. Airlines and other carriers cannot read it. The EES Regulation bars transfers to outside countries and private companies, with narrow exceptions for returns and urgent criminal cases.

Who can access your personal data in EES?

The EU’s page “Data held by the EES” answers this under the heading “Who can access your personal data?”. It names two groups. The first is “border, visa and immigration authorities” in the countries using the system, who use it to verify your identity and decide whether you may enter or stay. The second is “law enforcement authorities of the countries using the EES and Europol for law enforcement purposes”.

The EES Regulation (Article 9) reserves day-to-day access to “duly authorised staff” of the national authorities responsible for border, visa and immigration work, limited to what their tasks need. The EU portal adds that the data is “restricted to specific staff within national authorities”.

Can the police look at your EES record?

Only in a narrower way. Each country designates the authorities that may consult EES for the prevention, detection or investigation of terrorist offences or other serious criminal offences (Article 29). An officer cannot log in and browse. A unit has to send a reasoned request to a “central access point”, which must act independently of the designated authority and checks the conditions before any data is released (Articles 29 and 31).

Those conditions (Article 32) are that the search is necessary for such an offence, is “necessary and proportionate in a specific case”, and that there are reasonable grounds to think it will contribute to the investigation. To identify an unknown suspect or victim, officers may search by fingerprints, including latent fingerprints, or by facial image, and must normally have searched national databases first, with exceptions for urgent cases. To check the travel history of a known person, they search by details such as name, travel document number or entry and exit dates.

In an urgent case, such as an imminent danger to someone’s life, the central access point may process the request first and check the conditions afterwards, no later than seven working days later. If that check finds the access was not justified, the information that was accessed must be erased (Article 31).

Does Europol have access to EES?

Yes, for law enforcement purposes, as the EU portal says. Europol designates an operating unit that may request access, and a separate Europol central access point verifies the conditions before the search is run (Article 30). Europol must show the consultation is needed to support Member States in preventing, detecting or investigating terrorist offences or other serious crimes that fall under its mandate (Article 33).

Can airlines, cruise lines or coach operators see your EES data?

No. The EU portal says transport carriers “will only be able to verify whether short-stay visa holders have already used the number of entries authorised by their visa and will not be able to access any further personal data”. The check described there covers visa holders, so for a visa-exempt traveller, such as a US passport holder, the carrier is not given an EES record to read. Our piece on the airline check before boarding covers what carriers do see.

Can the EES record be sent to the United States or another country?

As a rule, no. Article 41(1) says data stored in EES “shall not be transferred or made available to any third country, to any international organisation or to any private entity”. There are two exceptions, and both are narrow.

• Returns.Border or immigration authorities may pass limited identity data to a third country, or to a body listed in the Regulation, to prove someone’s identity for the sole purpose of return. The portal names the listed bodies as a UN organisation, the International Organisation for Migration and the International Committee of the Red Cross. The Regulation also requires, among other conditions, a return decision that has not been suspended or appealed.
• Urgent criminal cases.Data that law enforcement obtained from EES cannot be passed to any third country, international organisation or private entity. The one exception (Article 41(6)) covers individual cases of exceptional urgency, namely an imminent danger associated with a terrorist offence, or an imminent danger to someone’s life associated with a serious criminal offence, and only for a limited set of identity data.

What data does an authorised officer see?

The portal lists what EES collects and stores: the data in your travel document, the date and place of each entry and exit, your facial image and fingerprints, and whether you were refused entry. It also draws on the Visa Information System, and on ETIAS once that exists, for the status of your authorisation. If you hold a short-stay visa, your fingerprints stay in the Visa Information System rather than being stored again in EES.

How long is the record kept, and how do you check it?

Per the portal, entry, exit and refusal records are kept for 3 years. The individual file is kept for 3 years and 1 day from your last exit or refusal of entry, or for 5 years from the end of your authorised stay if no exit was recorded. After that the portal says the data is erased automatically.

You have the right to ask for access to your data, to have inaccurate data corrected and to have unlawfully processed data erased. Contact a data controller or data protection officer in any of the countries using EES, preferably one you travelled to. If a request is refused, you can complain to that country’s supervisory authority, or to the European Data Protection Supervisor for matters involving agencies such as eu-LISA or Europol. The step-by-step route is in how to check and correct your EES record.

What this means for travellers

Nothing changes at the border: you still provide your details and biometrics each time you cross, and refusing biometric data means being denied entry. For US visitors, the practical point is that the record is held and used by European authorities under EU data protection rules, with law enforcement access gated behind a separate request. Not sure whether EES applies to you? See the EES and ETIAS comparison, or ETIAS for US citizens. ETIAS is not in operation yet, and the EU has not announced a start date.