The biggest shift in travel security this year is likely to come from how states handle identity, data, and devices, not from a single flashpoint. That has practical consequences for people on the move and the organisations behind them.

Borders Are Becoming Software-First
Borders are becoming software-first. Automated screening and face-matching are moving from pilots to routine flow. Europe is rolling out biometric border programmes, while the United States has normalised facial comparison at ports of entry and exit. In parallel, governments are consolidating crisis and public-service workflows on large data platforms. None of this is dramatic on the surface, but it changes exposure: who gets waved through, who is pulled aside, and how fast help can be organised when things go wrong.

Jurisdictional Drift and Device Risks
For travellers, the key dynamic is jurisdictional drift. Privacy and Al policies are diverging. The same person could be treated differently on different legs of a journey, consent gathered one way at departure, data retained another way in transit, and broader disclosure powers at arrival. That variance doesn't just create friction, it may open a loss-of-liberty window if an automated flag is treated as a security issue. This isn't about queue time. It's about control of your person and your devices while someone else decides what happens next.

Devices sit at the centre of the risk. Some jurisdictions may force device access, others allow broad searches at or near the border. A phone or laptop taken out of sight could be copied or configured without visible traces. Where practical, travel with fewer devices and a minimal data footprint. If a device is taken out of sight for inspection, log it and, after the trip, update key credentials and confirm it's clean if you feel it is necessary.

Behind the counter, more government decisions now flow through shared software. You won't control that, but you will feel it. The practical move is to make sure your assistance partners can work with the systems that matter in the countries you actually travel to. Where their connections are strong, approvals and routing tend to move; where they aren't, a simple case could turn tricky. That lost time is a security risk. Go in knowing who they escalate to locally, what data they'll need from you, and how they will record decisions if a detention, diversion, or medical case is later reviewed.

What to do with this?

• Treat route selection as a security control. A corridor aligned to your highest privacy standard is likely to reduce coercive device access and opaque secondary screening; a mismatched sequence could invite both.
• Default to minimal devices on higher-exposure trips. Provide clear scripts on what to decline and when to seek consular support.
• Test your information-sharing process ahead of time and close any gaps.