The Six-Hour Valve at Europe's Biometric Border Expired on Sunday, and It Only Lasted That Long Because the Rollout Missed Its Own Biometric Threshold

The narrow legal valve that let a European border force stop taking fingerprints when the queue at an airport got out of hand closed at the end of Sunday. It was not a power to switch off Europe's new biometric border. It was a power to run it in a lighter mode for a maximum of six hours at a single crossing point, and Portugal was one of nine governments that spent July asking Brussels, in writing, to keep it. Brussels did not answer in the terms they wanted, and on Monday the airlines started asking instead.

Ryanair called on the European Commission to extend the derogation until at least April 2027. Neal McMahon, the airline's chief operating officer, said the EU's handling of the Entry/Exit System (EES) "has been a shambles from start to finish", and that airlines, airports and border authorities had repeatedly warned Brussels that the rollout was not ready, that it would increase processing times and that it would create excessive queues. The airline says border delays reached two to three hours this summer at Krakow, Milan, Rome and Lisbon.

RENA, the Associação das Companhias Aéreas em Portugal (Association of Airlines in Portugal), takes a milder line on the state of the Portuguese airports but the same line on the law. "We believe the situation has improved in the meantime and there are more resources to respond to potential peaks in Portugal," its president Paulo Geisler told ECO. "That said, we would always want to preserve flexibility mechanisms, because the system depends on a lot of variables and there can be a need for an immediate response." He wants the legal framework to keep the possibility of temporary suspensions, "with greater decision-making latitude for the signatory states".

What Actually Expired

The thing that lapsed on Sunday is Article 7(3) of Regulation (EU) 2025/1534, the regulation of 18 July 2025 that created temporary derogations from the EES Regulation to allow a phased launch. It is worth reading closely, because almost every description of it in circulation is broader than the text.

During the phased launch itself, Article 7(1) was generous. A member state could suspend the EES fully or partially at given crossing points, either because the central system, a national system or the communications infrastructure had failed, or because of exceptional circumstances producing traffic of such intensity that waiting times became excessive. Full suspension meant collecting nothing. Partial suspension meant collecting everything except biometric data. Either way the state had six hours to tell the Commission and eu-LISA why, and how long it expected the suspension to last.

That version of the power died when the phased launch did. The Commission had set 12 October 2025 as the start date under Article 66(1) of Regulation (EU) 2017/2226, and the regulation defines the progressive start of operations as the 180 days that follow. Day 180 was 10 April 2026, which is when the EES became fully operational at every crossing point in the Schengen area.

What survived that date was a much smaller thing. Article 7(3) allowed a member state, for a further period, to partially suspend the EES at a border crossing point for a maximum of six hours, and only on the queueing ground: exceptional circumstances leading to traffic of such intensity that the waiting time becomes excessive. System failure was no longer a listed reason. During such a partial suspension the state is released from its obligation under Article 21(1) of the EES Regulation to register biometric data, and it still has to notify the Commission and eu-LISA within six hours. That is the whole of the flexibility that Ryanair now wants back: six hours, one crossing point, fingerprints and facial images dropped, everything else still collected.

The Ninety Days That Became a Hundred and Fifty

Article 7(3) was written to last 90 days after the end of the phased launch. From 10 April 2026, that would have run out around 9 July.

It did not, and the reason is Article 7(4). If fewer than 80 percent of the individual files registered in the EES during the phased launch contained biometric data, the 90 days is automatically extended by 60. Article 7(5) sets out how that gets established: eu-LISA hands the Commission the statistics by the tenth day after the launch period ends, and the Commission tells member states the outcome by the thirtieth day, which would have been early May 2026.

Nobody published that verification. But the date everyone has been working to gives it away. When the nine governments wrote to Brussels in July, they described "the anticipated end of the partial suspension mechanism, on 6 September" as a matter of serious and legitimate concern. Ninety days from 10 April is July. Ninety plus sixty is September. The mechanism was still alive in July, and it was dated to September, which means the automatic extension in Article 7(4) had been triggered, which in turn means that fewer than four in five of the individual files created during Europe's six-month biometric rollout actually carried the biometrics.

The outer limit in Article 8(2)(c) points at the same day from the other direction. It provides that Article 7(3) and (4) cease to apply 330 days from the start date. Counting from 12 October 2025, day 330 is 7 September 2026. Sunday 6 September was therefore the last day on which any government in the Schengen area could lawfully pull the six-hour lever, and the deadline the ministers were writing about was the regulation's own end stop rather than an administrative choice the Commission could have made differently. That is a real answer to the governments' request, and not an encouraging one: there was nothing for Brussels to extend without going back to the Parliament and the Council for a new regulation, which is exactly what Ryanair is now asking for.

What Portugal Has Left

The general power to relax border checks did not expire, and it is worth being precise about what it does and does not cover, because the two are easy to run together.

Article 9 of the Schengen Borders Code has always allowed border checks at external borders to be relaxed in exceptional and unforeseen circumstances, defined as unforeseeable events producing traffic of such intensity that waiting times become excessive and all resources have been exhausted in staff, facilities and organisation. The decision belongs to the border guard in command at the crossing point, entry checks take priority over exit checks, and the relaxation has to be temporary, proportionate and introduced gradually. None of that has changed, and a queue at Faro on a Saturday in August can still be managed under it.

What Article 9 does not do, and has never done, is release anyone from the duty to enrol a third-country national in the EES. It also requires the border guard to keep stamping passports even while checks are relaxed. The express exemption from Article 21(1) of the EES Regulation existed in exactly one place, Article 7(3), and that is the provision that has now gone. The other route out, the fall-back procedure in Article 21(2) of the EES Regulation, is available only where it is technically impossible to enter the data at all, and lets the officer record everything except biometrics by hand and stamp the passport. It is written for an outage, not for a crowd. A long queue is not a technical impossibility.

So from Monday, when a wave of arrivals lands at Lisbon or Faro and the hall fills up, the Portuguese border police can open lanes, prioritise entries and thin out the secondary checks, but they cannot lawfully decide to stop taking fingerprints and facial images. That is the practical difference the nine governments were writing about, and it is why an association that says the Portuguese situation has improved still wants the mechanism preserved.

How Portugal Got Here

Portugal has spent the year arguing this case on two fronts. In late April, Ryanair asked the Portuguese government directly to suspend the system for the summer, citing waits of more than one to two hours at Faro, Funchal and Porto. On 1 July, Airlines for Europe, ACI Europe and IATA wrote jointly to Commission President Ursula von der Leyen warning of severe operational consequences and asking for a permanent mechanism, to be in place by September, that would let national authorities suspend the EES temporarily when passenger volumes outran the capacity of the border controls.

Later in July the governments followed. Luís Neves, the Minister of Internal Administration, signed alongside counterparts from Belgium, France, Germany, Greece, Italy, Malta and the Netherlands, together with Switzerland, in a letter to Magnus Brunner, the European Commissioner for Internal Affairs and Migration. The nine asked for concrete written guarantees, before 6 September, that some margin would remain to ease EES procedures under heavy pressure at the borders. They did not get them.

The domestic response has been staffing rather than law. Portugal stationed 367 new officers at its airport borders in July, and by late August the PSP's border unit had put close to 400 officers into airport queues, a redeployment that has drawn criticism for thinning coverage in the interior. That is the "more resources to respond to potential peaks" that Geisler is referring to, and it is also the only lever Portugal now controls.

The Next Two Dates

Two more parts of the transitional scaffolding come down together on 7 October 2026, and travellers will notice one of them.

The first is the transitional period in Article 22 of the EES Regulation. Article 5(13) of the 2025 regulation moved its start to the day after the phased launch ended, so it has been running since 11 April 2026 and lasts 180 days. Until it ends, border authorities verifying that a visitor has not overstayed must look at the stamps in the passport in addition to the entry and exit records held in the EES. The second is the parallel duty on airlines. Under Article 6(2), carriers have had to keep checking passport stamps as well as querying the EES web service, and Article 8(2)(b) ends that obligation 360 days from the start date, which is the same day.

From 7 October, in other words, the passport stamp stops being part of the process for both the border guard and the airline, and the electronic record stands alone. Anyone whose travel history straddles the rollout has an interest in that date, because until it arrives a stamp can still rescue a record the system did not capture.

One piece of the scaffolding runs much longer. Under Article 8(2)(a), the obligation in Article 6(1) on national authorities, Europol, the ETIAS Central Unit and the Commission to take account of the possible incompleteness of the EES data recorded during the phased launch stays in force for five years and 180 days from the start date, which is April 2031. Brussels has committed for another four and a half years to treating its own rollout-era records as unreliable. That is the same admission the 80 percent threshold in Article 7(4) was designed to catch, written into the statute book with a much longer fuse, and it is the strongest argument the airlines have.

The separate ETIAS travel authorisation, the 20 euro permit that will apply to visa-exempt visitors, has already slipped to 2027.