The biggest shift in travel security this year is likely to come from how states handle identity, data and devices, not from a single flashpoint. That has practical consequences for people on the move and the organisations behind them.

Borders are becoming software-first. Automated screening and face-matching are moving from pilots to routine flow. Europe is rolling out biometric border programmes, while the US has normalised facial comparison at ports of entry and exit. In parallel, governments are consolidating crisis and public-service workflows on large data platforms. None of this is dramatic on the surface, but it changes exposure: who gets waved through, who is pulled aside, and how fast help can be organised when things go wrong.

Loss of liberty?

For travellers, the key dynamic is jurisdictional drift. Privacy and artificial intelligence (AI) policies are diverging. The same person could be treated differently on different legs of a journey, consent gathered one way at departure, data retained another way in transit, and broader disclosure powers at arrival. That variance doesn’t just create friction, it may open a loss-of-liberty window if an automated flag is treated as a security issue. This isn’t about queue time. It’s about control of your person and your devices while someone else decides what happens next.

A phone or laptop taken out of sight could be copied or configured without visible traces

Devices sit at the centre of the risk. Some jurisdictions may force device access, others allow broad searches at or near the border. A phone or laptop taken out of sight could be copied or configured without visible traces. Where practical, travel with fewer devices and a minimal data footprint. If a device is taken out of sight for inspection, log it and, after the trip, update key credentials and confirm it’s clean if you feel it is necessary.

The practical move is to make sure your assistance partners can work with the systems that matter in the countries you actually travel to.

Behind the counter, more government decisions now flow through shared software. You won’t control that, but you will feel it. The practical move is to make sure your assistance partners can work with the systems that matter in the countries you actually travel to. Where their connections are strong, approvals and routing tend to move; where they aren’t, a simple case could turn tricky. That lost time is a security risk. Go in knowing who they escalate to locally, what data they’ll need from you, and how they will record decisions if a detention, diversion, or medical case is later reviewed.

Security controls

What to do with this? Firstly, treat route selection as a security control. A corridor aligned to your highest privacy standard is likely to reduce coercive device access and opaque secondary screening; a mismatched sequence could invite both. Secondly, default to minimal devices on higher-exposure trips. Provide clear scripts on what to decline and when to seek consular support. Thirdly, test your information-sharing process ahead of time and close any gaps.

None of this requires alarmism. It does require acknowledging that rules and systems now shape security outcomes as surely as geography. The signals to watch are straightforward, official notes on border technology rollouts, regulator guidance on the use of automated screening, and the steady expansion of government platforms.

Bottom line: we assess that traveller security this cycle is likely to be driven by the interplay of rules (how identity and devices are handled) and systems (how decisions are automated and recorded). Organisations that route with governance in mind, harden people and kit, and can evidence clean decision-making will keep travellers safer and defend their choices when it counts.