Gibraltar–Spain Border Changes 2026: What Happens to Your Data?

If you live in La Línea, work in Gibraltar or run a business in the Campo de Gibraltar or along the Costa del Sol, you’ll know the headline: since 15 July 2026, the Gibraltar border fence has gone, and the routine passport queues went with it.

But the border hasn’t vanished. It has moved, and a good deal of personal data has moved with it. Checks now happen at Gibraltar’s airport and port, biometric records are being collected under the EU’s Entry/Exit System, and cameras are doing some of the work the barrier used to do. Here’s what changed, who it affects and what local businesses should do about their data.

What changed at the La Línea border on 15 July 2026?

The UK–EU Gibraltar treaty was signed in Brussels on 14 July 2026 and has applied provisionally since 15 July. The headline change is simple: routine checks on people crossing the land border between La Línea and Gibraltar have ended.

The checks haven’t disappeared, though. They’ve been relocated. Anyone arriving at Gibraltar’s airport goes through Gibraltar immigration first, then Schengen entry checks carried out by Spanish officials on behalf of the EU. Once cleared, you can move freely between Gibraltar, Spain and the wider Schengen area. Goods get a similar makeover: they are now cleared at designated EU customs posts, including in La Línea and Algeciras, rather than at the fence.

One caveat: ‘provisional’ means the rules are live but the paperwork isn’t finished. The House of Lords was scheduled to debate the treaty on 20 October, and the first objection period in the UK Parliament ends on 22 October, so formal ratification is still to come.

Who is affected, and how?

• Gibraltar residents. Recognised residents are exempt from the Entry/Exit System and ETIAS when they can show a valid Gibraltar ID card or residence permit. Treaty guidance published ahead of the change advised carrying both your passport and your Gibraltar ID, so it’s sensible to do the same.
• Frontier workers. Around 15,000 people cross every day, many from La Línea and the Campo de Gibraltar. They now cross without routine checks, and Gibraltar has introduced Frontier Workers Regulations 2026 to give cross-border workers a clearer legal footing.
• UK visitors who don’t live in Gibraltar. Expect biometric registration at the airport or port. Time spent in Gibraltar now counts towards the Schengen limit of 90 days in any 180.
• Spanish and other EU citizens. Spanish citizens can cross the land border with their national ID card and no routine checks. Arrivals by air or sea go through the airport or port checks.

What personal data is being collected?

Four things are worth knowing about.

• The Entry/Exit System (EES). For non-EU travellers entering Schengen, it replaces passport stamps with a digital record: passport details, a facial image and fingerprints, plus entry and exit dates. It began rolling out on 12 October 2025 and became fully operational on 10 April 2026. Reports put the retention period at three years after your last exit, so check the official EU page for the full rules.
• Facial recognition cameras. Press reports on 15 July said Gibraltar officials had set up live facial recognition cameras at entry points and around the territory. The reports I found don’t say who operates them, how long images are kept or what the legal basis is. For anyone who handles personal data for a living, that’s the question to watch.
• ETIAS. This pre-travel authorisation for visa-exempt visitors was scheduled for the last quarter of 2026, with the EU due to confirm the exact date. Gibraltar residents are exempt under the treaty.
• Data flows between Gibraltar and the EU. The treaty includes data protection provisions so personal data can keep moving between the two. According to the UK government’s summary, this works without the EU issuing a formal adequacy decision (its official ‘your data rules are good enough’ stamp) for Gibraltar, in return for Gibraltar staying aligned with key EU data protection rules.

What local businesses should do about data

If you employ frontier workers, serve customers on both sides of the border or keep personal data in both Gibraltar and Spain, the border change is a good prompt for some housekeeping. A sensible starting list:

1. Map your cross-border data. Where do staff, customer and supplier records live, and which side of the border are your systems and suppliers on?
2. Review your privacy notices. Say clearly where personal data goes and which rules apply. Gibraltar and Spain both work to GDPR-style rules, but they are separate legal systems.
3. Tidy frontier-worker records. Check that ID and residence document details, tax IDs and payroll data are accurate and consistent, with one record per person.
4. Check any cameras or ID checks you run. If you use CCTV, access control or ID scanning on your own premises, confirm the legal basis, signage and retention period.
5. Review supplier contracts. Payroll, CRM and cloud providers should be clear about where data is stored and how international transfers are handled.
6. Keep a simple log. A short record of what you reviewed and when is worth more than a perfect policy nobody can find.

It’s the same clean-data logic as in the VeriFactu piece: new rules only work as well as the records underneath them.

Quick answers for La Línea and Gibraltar

Do I still need my passport to cross at La Línea?

Routine checks at the land border have ended, but carry ID anyway. Gibraltar residents were advised to carry both a passport and their Gibraltar ID or residence card, and you’ll need a passport if you travel in or out by air or sea.

Does my time in Gibraltar count towards my Schengen days?

For UK nationals who don’t live in Gibraltar, yes. The UK minister told MPs that time spent in Gibraltar counts towards the EU’s 90-in-180-day limit.

When does ETIAS start?

It was scheduled for the last quarter of 2026, with the exact date still to be confirmed by the EU. Check the official ETIAS website before you travel.

Where I can help

I’m a Power BI and data consultant based in La Línea, working with businesses across the Costa del Sol and Gibraltar. I’m not a lawyer, and I don’t give legal advice, so speak to a data protection legal specialist for that. What I do is get your data in order: clean records, clear reporting and dashboards that show who holds what, where it lives and when it should be deleted.

If you’d like a hand getting your data ready for the post-fence era, send me a message on WhatsApp.

This post is general information, not legal advice. The treaty is being applied provisionally and details may change, so please check official sources and take advice on your own situation.

Sources

• House of Lords Library — UK-EU Agreement in respect of Gibraltar (14 Oct 2026): signature and provisional application dates, relocated airport checks, 90-in-180 point, data protection provisions, Lords debate and objection dates.
• Travel Weekly — Spain, Gibraltar end land border checks after 300 years (16 Jul 2026): checks moved to the airport and port, about 15,000 daily workers.
• GlobalPost — EU-UK Treaty Ends Border Checks Between Gibraltar and Spain (16 Jul 2026): ID cards for Spanish citizens and residence cards for Gibraltar residents.
• Gibraltar.com — Gibraltar EU Treaty 2026: Travel and Schengen Guide (reviewed 19 Jul 2026): resident exemptions from EES and ETIAS, documents to carry.
• Dublin City University — Has the Last Wall of Brexit Really Fallen?: resident exemptions under the treaty and the customs clearance model.
• Sky News via Radio X — Gibraltar ushers in new era as border fence removed (15 Jul 2026): live facial recognition cameras at entry points.
• Sovereign Group — UK signs historic treaty with EU to bring down border fence: the UK government’s summary on data flows without an adequacy decision.
• Mondaq — Gibraltar introduces new framework for cross-border workers: Frontier Workers Regulations 2026.
• European Commission — Entry/Exit System (EES) is fully operational (10 Apr 2026).
• HealthPlanSpain — Gibraltar-Spain Border Set for Digital Transformation: biometric data collection and the reported three-year retention period.
• Austrian National Tourist Office — ETIAS: ETIAS scheduled for the last quarter of 2026, date to be confirmed by the EU.