Storage and deletion practices depend on the agency, processing system and rules governing the border crossing, meaning a photograph captured for an apparently simple facial comparison can be deleted within hours in one jurisdiction while becoming part of a longer immigration or border record somewhere else.
WASHINGTON, DC, October 23, 2026, When an airport eGate photographs a traveler, the visible biometric comparison may finish within seconds, but what happens to the resulting facial image afterward depends upon the government operating the checkpoint, the traveler’s status, the purpose of collection and the information-management rules governing that particular border system.
The Camera Image and the Passport Image Are Different Records
During a typical automated border inspection, the camera captures a new facial image of the traveler while the inspection system obtains or accesses a trusted reference photograph associated with that person’s passport, immigration record or another government identity source used for verification.
Facial recognition software then compares mathematical characteristics extracted from those images, producing a similarity assessment that helps the inspection system determine whether the traveler standing before the camera appears sufficiently similar to the individual represented within the trusted reference photograph.
Although travelers may experience this process as one photograph being checked against another, the live image, passport portrait, biometric template, transaction record and immigration event can exist as technically distinct pieces of information governed by different storage, access and retention policies.
Understanding that distinction is important because an agency might delete the newly captured checkpoint photograph quickly while retaining a record showing that the traveler crossed the border, passed biometric verification or was referred for additional examination according to separate legal authorities.
Some Facial Images Are Deleted Quickly
Certain border programs deliberately minimize retention of newly captured photographs when authorities determine that storing the image is unnecessary after the biometric system successfully verifies the traveler’s identity.
United States Customs and Border Protection states in its current biometric travel privacy information that it discards photographs of United States citizens participating in its facial comparison process within a limited period after successful identity verification, while different rules apply to certain foreign nationals whose photographs support statutory biometric entry and exit requirements.
CBP materials state that it discards photographs of United States citizens within twelve hours after identity verification, showing that a photograph used temporarily for matching can have a much shorter retention period than other records tied to the same international journey.
This distinction also shows why travelers should avoid assuming that every photograph that briefly appears on an airport screen automatically becomes a permanent facial recognition record, because the applicable retention period may depend substantially on nationality, statutory requirements, and the system receiving the photograph.
Foreign Travelers Can Be Subject to Longer Retention
Different rules can apply when governments collect biometric information as part of formal immigration entry and exit programs, particularly where legislation requires authorities to maintain records showing when foreign nationals arrived, departed, overstayed, or encountered another immigration event.
In the United States, CBP explains that it can store photographs of foreign nationals who meet biometric entry and exit requirements in secure Department of Homeland Security systems, allowing the government to confirm arrivals and departures under existing immigration processes.
The retention policy therefore reflects more than the technical needs of facial recognition itself, because the same photograph can support an immigration record, border encounter or legally mandated entry and exit system whose purpose continues after the instantaneous facial comparison has finished.
For travelers, the most useful privacy question is not simply whether facial recognition technology stores photographs, but which authority collected the image, for what legal purpose, for which traveler category, and within which government information system.
Britain Uses Different Retention Periods for Different Travelers
The United Kingdom provides another illustration of how biometric retention can vary substantially according to citizenship and immigration status, even when people encounter visually similar cameras while passing through an airport border-control environment.
Current United Kingdom Home Office biometric retention guidance states that facial images of British citizens captured at eGates and primary control points may be retained for up to thirty days, while corresponding images of people of other nationalities may generally be retained for much longer, up to six years.
The guidance also allows longer retention periods for certain foreign nationals who undergo additional immigration procedures, including those subjected to further examination, detention, or asylum processing, showing how the reason for biometric collection can significantly affect the rules governing subsequent storage.
Those differences show why describing airport facial images as universally deleted immediately, universally kept permanently, or universally subject to one standardized international retention rule would give travelers an inaccurate sense of how biometric border information is actually managed.
Europe’s Entry/Exit System Creates Biometric Travel Records
European countries participating in the Entry/Exit System now electronically register specified non-European travelers arriving for short stays, replacing traditional passport stamping with digital records containing travel-document information, crossing details and biometric information including facial images and fingerprints.
The European Commission states that the EES became fully operational across participating external borders on April 10, 2026, following a progressive deployment that began on October 12, 2025, meaning biometric registration is now an established component of eligible short-stay border crossings within the system.
European Union rules set retention periods partly based on the traveler’s immigration history, generally retaining EES information for three years for people who comply with applicable short-stay requirements and for longer periods in cases involving authorized-stay violations.
The EES example illustrates an important difference between an image temporarily captured to facilitate one facial comparison and a facial image collected intentionally as part of a government biometric entry and exit record designed to support future crossings and immigration administration.
The Reference Passport Portrait May Already Exist Elsewhere
Deleting a live airport photograph does not necessarily mean that government systems no longer possess any image of the traveler, because the reference portrait used during facial comparison often originates from an existing passport, visa or previous immigration record created before the current border crossing.
Electronic passports can store a digital facial portrait in their contactless chips, while passport-issuing authorities and immigration agencies can separately maintain photographs under the laws and retention schedules governing passport issuance, visa processing, and national identity administration.
A border agency therefore may not need to preserve every newly captured image indefinitely simply to recognize the traveler during a future inspection, particularly when another authoritative government photograph remains legally available as a trusted biometric reference.
This distinction explains why privacy discussions should separate newly captured airport images from passport photographs, visa photographs and previously collected immigration biometrics, even though facial recognition software may temporarily bring several of those sources together during one automated comparison.
The Facial Image May Travel Through Several Systems
A biometric airport transaction can involve more than the physical eGate itself because cameras, airline infrastructure, airport systems and government services may exchange information through secured technical connections while completing the traveler’s identity verification.
In some United States biometric departure environments, an airline or airport partner can capture the photograph and transmit it to CBP for comparison, while official CBP materials state that participating carriers must delete photographs collected through that process rather than retaining them for unrelated purposes.
That architecture shows why asking whether the airport keeps a photograph can oversimplify the situation, because the organization operating the camera may differ from the government authority that performs the biometric comparison and controls the resulting official record.
Travelers concerned about data handling therefore benefit from identifying the government program behind the camera, since an airport terminal with numerous facial recognition stations may include systems operated for immigration, security, airline boarding, and other purposes under separate privacy frameworks.
Matching Does Not Necessarily Require Permanent Storage
Facial recognition technically requires access to images long enough to perform the comparison, but successful matching does not inherently require that every new photograph remain stored permanently after the algorithm has finished evaluating the traveler’s identity.
A system can capture an image, extract information needed for the comparison, generate a result and subsequently delete the newly collected photograph according to its retention policy, while preserving only whatever transaction information government authorities are legally required to maintain.
Other systems deliberately retain the image because the biometric photograph itself forms part of a legally authorized immigration record, making storage a function of the broader government program rather than an unavoidable technical characteristic of facial recognition technology.
These different approaches help explain why two eGates using comparable facial recognition algorithms can have dramatically different privacy consequences depending upon the laws, government databases and immigration purposes surrounding their deployments.
A Failed Match Can Change What Happens Next
When an automated facial comparison succeeds normally, the system may follow its standard deletion or retention schedule, while a failed, uncertain or suspicious transaction can generate additional records if the traveler requires manual inspection or further government examination.
Border authorities may take another photograph, manually examine the passport, consult immigration information, or document the referral, so the resulting record can be more extensive than the information associated with a routine automated crossing.
That possibility does not mean an unsuccessful eGate transaction automatically creates a permanent enforcement record, because poor image quality, aging, camera positioning, and other ordinary circumstances can cause biometric uncertainty without establishing wrongdoing.
However, once an encounter becomes a separate immigration, enforcement, or security matter, information collected during that process may be subject to different retention authorities than those governing an ordinary photograph captured solely for automated identity verification.
Security Vetting Can Involve Separate Photograph Collections
Government biometric programs can also use photograph collections for functions beyond simple one-to-one passport comparison, although separate authorities, privacy assessments, and operational rules generally govern those activities and define why particular imagery may be processed.
A 2024 Department of Homeland Security privacy assessment on CBP biometric vetting explains that some temporary facial-image galleries associated with manifested travelers can be maintained for limited periods, while galleries for United States citizens used for that activity are purged after arrival or departure processing is complete.
The same assessment explains that original photographs obtained from source government systems remain subject to the retention requirements that apply to those originating databases, reinforcing the principle that identical imagery can receive different retention treatment depending on where the government obtained and stores it.
This distinction becomes especially important when evaluating privacy claims because deleting one temporary working copy does not necessarily require deletion of an independently collected passport, visa or immigration photograph lawfully maintained within another government database.
Biometric Templates Can Be Different From Photographs
Facial recognition systems do not merely compare photographic pixels because modern algorithms transform facial characteristics into mathematical representations that allow software to measure similarity between the newly captured face and its reference image.
Depending on system design and policy, those mathematical representations can be temporary processing artifacts or information subject to their own security and retention rules, meaning deleting the visible photograph does not automatically answer every question about derived biometric information.
For this reason, privacy policies on biometric systems should explain not only image collection but also processing purposes, retention, sharing, security protections, and whether derived biometric information remains after the source photograph is deleted.
Travelers reading public privacy notices should therefore look beyond statements saying photographs are protected, because meaningful transparency also requires understanding how long information remains available, which government organizations can access it and what legal mechanisms authorize its use.
Access Is Usually Restricted Rather Than Public
Government biometric databases are not ordinary public photo repositories, and border agencies typically apply technical and administrative controls to limit access to personnel and systems with an authorized government purpose.
Those protections can include access permissions, logging, network security, encrypted transmission and organizational rules governing how government employees or partner systems handle biometric information, although the precise protections and oversight mechanisms differ among jurisdictions.
Restricted access nevertheless does not make retention insignificant because a facial image can remain sensitive personal information even when strong cybersecurity controls protect it, particularly when the record connects an individual’s biometric characteristics with international movements and immigration history.
Effective biometric governance therefore involves both preventing unauthorized disclosure and limiting legitimate government collection or retention to periods justified by clearly identified operational, statutory and public-security purposes.
Data Sharing Depends on the Governing Legal Framework
Some border information can be accessed or shared with other authorized government organizations under applicable immigration, law-enforcement or national-security legislation, while other biometric information may remain restricted primarily to the authority operating the border system.
European EES rules, for example, allow competent border and visa authorities to access system information while also creating controlled mechanisms through which designated law-enforcement bodies and Europol can request access for specified serious-crime and terrorism purposes.
Such provisions show why retention matters even after the traveler completes the immediate border crossing, because stored biometric information can support specifically authorized governmental functions for as long as the legislation permits it to remain available.
Those access mechanisms do not mean every government employee or outside organization can freely search biometric databases, since access remains subject to the legal and technical restrictions established for the particular information system.
Deletion Rights Are Not Identical Everywhere
Travelers may possess privacy, access, correction or deletion rights under applicable national legislation, but the existence and scope of those rights can vary considerably when government agencies retain biometric information for immigration, border-security or statutory record-keeping purposes.
United Kingdom guidance recognizes data-protection rights concerning biometric information while also explaining circumstances in which immigration legislation permits retention, demonstrating that a general right to request deletion does not necessarily require authorities to erase every lawfully collected border image immediately.
Similar distinctions appear throughout modern privacy law because governments can lawfully retain information despite an individual’s request, particularly where legislation requires retention for immigration administration, law enforcement, or another defined public purpose.
A traveler seeking deletion or access should therefore consult the privacy procedures of the agency that controls the record rather than assuming a general consumer privacy mechanism governing commercial photographs applies to sovereign border databases.
Facial Images Require Stronger Security Because They Cannot Simply Be Reissued
A password exposed through a security breach can usually be changed, while a person’s face represents an enduring biometric characteristic that cannot be replaced with comparable ease after unauthorized disclosure or misuse.
That difference explains why biometric information requires particularly careful security, retention and governance practices, even when facial recognition systems provide meaningful benefits by reducing document fraud and improving the efficiency of automated traveler verification.
Governments deploying airport biometrics therefore face an ongoing balance between collecting enough information to meet legitimate border objectives and minimizing unnecessary retention that could increase privacy risks if information is misused or compromised.
Shorter retention periods for certain traveler categories can reduce that exposure, while longer retention periods generally require identifiable legal or operational purposes beyond the momentary convenience of automated facial matching.
Passport Security and Biometric Privacy Are Related but Separate Issues
Electronic passport authentication can verify the digital integrity of protected document information, while facial recognition determines whether the traveler resembles the trusted portrait and privacy rules determine what happens to newly collected biometric information after those technical checks conclude.
Amicus International Consulting examines the security side of that relationship in its guide to how modern passports help detect counterfeits and protect identity, explaining why contemporary travel documents rely on several independent physical, electronic, and biometric protections instead of a single authentication mechanism.
Strong passport security therefore does not answer every privacy question created by automated borders, because authorities must separately establish policies governing whether live facial images are stored, how long they remain available and which organizations may use them afterward.
Likewise, restrictive image-retention rules do not weaken an electronic passport’s underlying cryptographic protections, because document authentication and biometric data governance serve fundamentally different roles in the modern border-management architecture.
Travelers Should Look for the Agency Behind the Camera
When travelers want to understand what happens to an eGate photograph, the most reliable starting point is identifying the border authority responsible for the checkpoint and locating that agency’s current biometric privacy notice rather than relying upon assumptions derived from another country’s airport.
The relevant notice should ideally explain the purpose of facial collection, whether participation is mandatory for that traveler’s category, what reference photographs are used, how long newly captured images remain stored and whether information can enter another government record.
Nationality can also matter considerably because the United States and United Kingdom examples demonstrate that governments can apply markedly different retention periods to citizens and foreign nationals even when those travelers encounter similar biometric equipment inside the same airport.
The purpose of collection matters equally because an ordinary automated identity check, a formal biometric immigration enrollment, an asylum proceeding and an enforcement encounter can create fundamentally different records despite each process potentially including a facial photograph.
There Is No Single Global Answer
Airport biometric systems increasingly share common technical standards and recognition technologies, but governments have not adopted a single international rule requiring them to retain or destroy every newly captured eGate image for the same period.
Current practice ranges from relatively rapid deletion for some successfully verified travelers to multi-year retention when biometric information forms part of an immigration entry-and-exit system, showing why broad statements about airport facial-image storage can easily mislead.
The photograph captured during an eGate scan should therefore be understood as information entering a specific legal and technical system, whose eventual deletion depends on the traveler’s status, the government’s purpose, and the retention schedule that applies to that system.
For travelers increasingly accustomed to looking into a camera and seeing a gate open moments later, the most consequential privacy questions begin after that successful match, when the photograph leaves the visible checkpoint interface and becomes subject to the rules determining whether it disappears within hours or remains part of a government border record for years.
Related reading: The Passport MRZ Connects Printed Details With Digital Checks.