Vancouver, Canada — In 2025, newly published figures from the United States Customs and Border Protection (CBP) confirm that agency officers conducted over 47,000 electronic device searches during fiscal year 2024, marking the highest annual total since CBP began reporting such statistics. The inspections, which take place at airports, seaports, and land border crossings, encompass everything from quick, manual reviews of a smartphone’s photo gallery to comprehensive forensic extractions of a laptop’s storage.
The agency has described this increase as the product of improved technology deployment, enhanced officer training, and expanded cooperation with other U.S. and foreign enforcement agencies. Critics, however, point to the implications for privacy and civil liberties, noting that most of these searches are conducted without individualized suspicion or a warrant, relying instead on the broad “border search exception” to the U.S. Constitution’s Fourth Amendment.
For travelers, this heightened level of scrutiny can lead to both immediate and long-term exposure risks. A device inspected at the border can yield years’ worth of stored communications, documents, contacts, and images. In cases of advanced searches, data can be copied and stored in CBP systems for up to 15 years. The breadth of what can be accessed, including personal health information, financial records, intellectual property, or sensitive professional material, has led privacy advocates to call for stronger limits on what border officials can review and retain.
Amicus International Consulting, a global advisory firm with a focus on legal identity transformation, cross-border privacy strategies, and multi-jurisdictional risk management, has responded by releasing its Border Data-Minimization Checklist, a framework designed to help travelers legally reduce the amount of information available to inspection, thereby minimizing exposure without violating customs or immigration laws.
The Legal Foundation of Border Device Searches
CBP’s authority to inspect belongings without a warrant at U.S. entry points is longstanding and has been upheld repeatedly in court. This authority extends to electronic devices, with courts generally agreeing that the national security and customs enforcement interests at the border justify a lowered expectation of privacy.
The agency divides searches into two categories:
Basic Searches: Conducted manually by an officer, limited to information accessible on the device without the use of forensic tools. This can involve reviewing photos, scrolling through text messages, and opening locally stored documents.
Advanced Searches: Conducted using CBP’s forensic examination tools, which can access deleted files, download contact lists, extract text messages, retrieve stored credentials, and sometimes access cloud-based content if the device remains logged in and connected to the internet.
Advanced searches require approval from a supervisor but not a warrant. While CBP policy sets some limits on what can be retained and shared, the reality is that once data is copied into a government system, it may be reviewed later, cross-referenced with other databases, or shared with other agencies domestically and internationally.
Growth Trends Behind the 47,000 Searches
CBP’s FY2024 total represents a nearly 12 percent increase over FY2023. Several factors contribute to this upward trajectory:
Expanded Deployment of Forensic Tools: More ports of entry now have the hardware and trained staff to conduct advanced extractions on-site.
Increased Data-Sharing Initiatives: Partnerships with agencies such as Immigration and Customs Enforcement (ICE), the Federal Bureau of Investigation (FBI), and the Department of Homeland Security (DHS) intelligence units encourage more frequent device inspections as a data collection opportunity.
Post-Pandemic Travel Recovery: Higher passenger volumes create more opportunities for random selection and targeted screening.
Evolving Targeting Criteria: Data analytics help CBP identify travelers deemed “high risk,” a category that can include people with specific travel patterns, device usage characteristics, or prior border interactions.
Why This Matters for All Travelers
A common misconception is that only those suspected of wrongdoing are subject to device searches. In reality, travelers can be selected randomly or based on criteria unrelated to any specific suspicion. A frequent flyer who transits through certain countries, a student carrying academic research, or a businessperson returning from an industry conference can all be flagged for inspection.
Once a device is accessed, the scope of information reviewable by CBP is vast:
Personal text messages and emails.
Private photographs, videos, and audio recordings.
Contact lists and call histories.
Browsing histories and stored cookies.
Downloaded files and work documents.
Stored credentials and saved passwords.
In cases involving advanced searches, entire device images can be created and retained for future examination, meaning the review of your data may continue long after you have cleared customs.
The Amicus Border Data-Minimization Checklist
Amicus International Consulting’s checklist emphasizes preparation, device strategy, and data segregation to ensure that only essential, low-risk information is accessible during travel.
Phase One — Pre-Travel Data Audit
Before crossing a border, evaluate the devices you plan to carry.
Remove any files and apps that are not needed for the trip.
Sign out of email and cloud accounts to prevent live access to remote content.
Securely back up all critical information to encrypted storage that will remain at home or in a trusted cloud environment.
Delete sensitive contacts, documents, and communications from the device, ensuring they are recoverable from backup if needed later.
Phase Two — Dedicated Travel Devices
One of the most effective strategies for minimizing exposure is traveling with devices that contain only the essentials.
Use a travel laptop with no sensitive corporate or personal archives.
Carry a travel phone with limited contacts and apps, ideally without direct access to personal accounts.
If necessary, use loaner devices for particularly high-risk trips.
Phase Three — Security Configuration
Set a strong alphanumeric passcode rather than a biometric lock. Fingerprints and facial recognition can be compelled more easily than passwords.
Disable features that allow device unlocking via paired wearables.
Remove autofill data from browsers and applications.
Phase Four — Work-Personal Separation
Avoid carrying work and personal information on the same device.
Keep corporate email and documents in a secure, remote-access environment rather than on the device itself.
Phase Five — Communication Protocols
For sensitive conversations, use encrypted messaging platforms with disappearing messages.
Do not carry ongoing sensitive communications across borders unless necessary.
Case Studies in Minimization
Case Study 1: The Corporate Negotiator
A senior executive from a multinational firm traveling to Southeast Asia for contract negotiations implemented a clean-device policy. The travel laptop contained only the meeting presentations and blank templates. Sensitive project files were stored in a secure server accessible via VPN after arrival. Upon return to the U.S., the executive was randomly selected for a device inspection at San Francisco International Airport. The review revealed only the public-facing materials, eliminating any competitive risk.
Case Study 2: The Human Rights Advocate
A nonprofit leader advocating for vulnerable communities in politically unstable regions traveled with a basic smartphone containing no personal photographs, contacts, or messages. All organizational documents were encrypted in a cloud service requiring multi-factor authentication that was not stored on the phone. A secondary inspection at a land border crossing resulted in no access to sensitive materials.
Case Study 3: The Investigative Journalist
Covering a multinational financial corruption story, a journalist used a two-device strategy: one for communication with editors and public research, and another, stored in a secure location overseas, containing sensitive source materials. The travel device, searched upon arrival at JFK, contained no compromising files, protecting source confidentiality.
International Context
The U.S. is not alone in conducting device searches at borders.
Canada: Border officers can search devices without a warrant. Refusal to provide a passcode can result in seizure.
Australia: Officers may copy data for off-site review. Noncompliance can lead to fines or legal action.
United Kingdom: Counterterrorism laws permit device searches without suspicion, and devices can be retained for extended periods.
European Union: Rules vary by country, but at external Schengen borders, officers may request device access.
For individuals who travel frequently or across multiple jurisdictions, aligning border preparation strategies to the strictest applicable standard is recommended.
Legal Realities and Limitations
Travelers often ask whether they can legally refuse to provide passwords. In the U.S., declining to unlock a device is not a criminal offense, but it can lead to detention, device seizure, or additional questioning. For non-U.S. citizens, refusal may result in the denial of entry. U.S. citizens cannot be refused reentry, but may face delays and device retention.
Practical Implementation Steps from Amicus
Plan Before You Pack: Identify the devices you will take and the purpose each serves.
Audit Content: Remove all unnecessary files, communications, and accounts.
Harden Access: Use strong passwords, disable biometrics, and turn off automatic logins.
Separate Roles: Keep personal and professional functions on individual devices.
Use Secure Cloud Storage: Access sensitive data only after clearing border controls.
Stay Updated: Laws and agency practices evolve; review current rules before each trip.
Why Data Minimization Works
Even when a border search is unavoidable, having less data available for inspection reduces both the immediate and downstream risks. Without sensitive files, stored passwords, or active sessions in cloud accounts, an inspection yields minimal intelligence value. This protects not only personal privacy but also corporate confidentiality and, in some cases, the safety of colleagues, clients, or sources.
Long-Term Data Exposure Risks
When CBP copies data from a device, it can be stored in databases accessible to multiple agencies. This means information collected at the border may be used years later in unrelated investigations, or even shared with foreign partners under intelligence-sharing agreements. By minimizing what is on a device at the time of inspection, travelers control what can enter that long-term data ecosystem.
Conclusion
The record-setting 47,000 device searches by CBP in FY2024 highlight an increasingly data-centric approach to border enforcement. For modern travelers, this reality makes preparation essential. Compliance with border authority is non-negotiable, but the scope of what is accessible to inspection can be managed through deliberate, lawful strategies.
Amicus International Consulting’s Border Data-Minimization Checklist provides a detailed, practical framework for reducing unnecessary exposure during travel. Whether you are an executive guarding trade secrets, a journalist protecting sources, or a private citizen safeguarding personal privacy, proactive preparation can mean the difference between a quick border crossing and a long-term data compromise.
Contact Information
Phone: +1 (604) 200-5402
Email: [email protected]
Website: www.amicusint.ca
