For privacy wonks and casual observers alike, border screening and surveillance has become an increasing area of critical concern over the last year. Around the world, invasive governments have particularly threatened people's digital privacy. That extends to the US, where Customs and Border Protection has expanded its demands and searches as well. And a fraught situation for travelers is even more so for US immigrants who are having more and more of their digital and social media footprint monitored by the Department of Homeland Security.

The agency's recent initiatives came into focus last week, when DHS posted updated language in the Federal Register about collecting “social media handles, aliases, associated identifiable information, and search results” on immigrants, including naturalized citizens and permanent residents. DHS also issued a notice about changes to its Intelligence Records System database that will store “public-source data (including information from social media)” and will gather information from a host of sources, including “commercial data providers and public sources such as social media, news media outlets, and the Internet.”

These initiatives, which began during the Obama administration, claim to be part of standard domestic security screening and background checking. But immigration experts and digital privacy advocates alike are deeply skeptical about how effective social media checks really are. Particularly, they cite the open-ended scope of the surveillance, and potential chilling effects of the dragnet, as critical drawbacks that should give the federal government pause.

"Admissions decisions should be based on specific criteria defined in laws or regulations," says Edward Hasbrouck, a travel expert and consultant to the freedom of movement group The Identity Project. "What can you and can’t you say on Facebook if you want to be admitted to the country? We’re hearing over and over that everybody who’s not a citizen is afraid to say anything on social media because they don’t know how it might be held against them."

Overreach

Ambiguity over what DHS will collect and why has immediate free speech implications for immigrants and potential immigrants. And language about collecting "social media handles, aliases, [and] associated identifiable information" hints at a more expansive agenda than simply scoping out people's public personas online. DHS seems to be asking people to list the pseudonyms and anonymizers they have used online, potentially exposing past speech they intended to disassociate from their real name.

"Yes, our rights at the border including for citizens are more limited than in other parts of life, but this is a gross invasion of your privacy and is far beyond the boundaries of a reasonable search," says Nuala O’Connor, the president of the digital rights group Center for Democracy & Technology and a former chief privacy officer at DHS. "With these widespread fishing expeditions, who knows when or where that data about you will pop up again, particularly when you're asked to divulge spaces online where you thought you might have been anonymous or pseudonymous."

Casting such a wide net also inevitably impacts bystanders whom subjects interact with online, creating implications for freedom of association as well.

At this point it's hard to know the bounds of these programs. Most of the new DHS language references "public" data, presumably meaning, for example, public tweets or Facebook posts. But it's not clear what the requirements might be to grant DHS access to more private or limited posts, particularly as US Customs and Border Protection has ramped up demands at the border for access to individuals' digital devices and passwords.

DHS emphasized that it is collecting public data in a statement to WIRED. "The amendment does not represent a new policy," the agency says. "DHS, in its law-enforcement and immigration-process capacity, has and continues to monitor publicly available social media to protect the homeland. In an effort to be transparent, to comply with existing regulations, and due to updates in the electronic immigration system, DHS decided to update its corresponding Privacy Act system of records."