Last updated: 2 November 2026 (Paris). CDC orders checked on cdc.gov and in the Federal Register on 2 November 2026. Airport list checked on cbp.gov on 2 November 2026.
Next review: 4 November 2026.
The US has three Ebola travel measures. All three respond to the Bundibugyo virus outbreak centred in the Democratic Republic of the Congo (DRC). CDC bars most non-US citizens who were in the DRC, Uganda or South Sudan in the last 21 days. From 3 November 2026, every person on a flight to the US, US citizens and crew included, must also sign a CDC attestation that they were not in the DRC in the last 21 days. CDC amended the attestation order on 28 October to cover crew and cargo flights. DHS sends flights carrying recent travellers from those three countries to three US airports. This page keeps all three measures current, with their start and end dates.
| Item | Value | Source |
|---|---|---|
| New from 3 Nov 2026 | CDC attestation for every person on a flight to the US, passengers and crew: not in the DRC in the last 21 days | CDC attestation page; order of 22 Oct 2026, amended 28 Oct 2026, 91 FR 68518 |
| Who signs | Everyone on board, any nationality, US citizens included, connecting passengers included. Crew on duty, including crew positioning on the flight (deadheading). Cargo flights and flights from preclearance airports included. Flights from abroad into US territories (Guam, Saipan, San Juan) included | Amended order, definitions of "Person(s)" and "Aircraft"; CDC FAQ |
| Airline duty | Check before boarding, refuse anyone without it, keep a record for each person for at least 42 days, provide it on request. Do not send it through APIS | Amended order, section 1; CDC FAQ |
| Travelling parties | One authorised representative may attest for each member of the party. The airline keeps a record for each person | Amended order, definitions; CDC FAQ |
| Entry ban | Non-US citizens, green card holders included, who were in the DRC, Uganda or South Sudan in the last 21 days | 91 FR 65556 |
| Routing | Flights with recent travellers from those 3 countries land at IAD, ATL or JFK | 91 FR 29896; CBP advisory of 31 Aug 2026 |
| Kenya | State Department Level 3 advisory since 19 Oct 2026. Not a US entry rule | travel.state.gov |
| End dates | Entry ban: 10 Nov 2026 unless renewed. Attestation: 18 Dec 2026 unless extended, and CDC can end it earlier. Routing: no end date | Orders; 91 FR 65556; 91 FR 68518 |
US Ebola rules at a glance
Three US measures cover Ebola: the CDC entry suspension and the DHS airport routing, which apply today, and the CDC attestation, which applies from 3 November. Kenya is not covered by any of them. We update this table in place when a rule changes.
| Rule | Who it covers | What it means in practice | From | Until | Owner and source |
|---|---|---|---|---|---|
| CDC entry suspension (order of 11 Oct 2026, latest 30-day renewal) | Non-US citizens and non-US nationals, including green card holders, who were in the DRC, Uganda or South Sudan in the last 21 days, whatever their passport | Not allowed to enter the US until 21 days after leaving those countries. Not covered: US citizens and nationals; US military and government personnel overseas with their spouses and children, subject to assurances; people excepted case by case by customs officers or CDC | First order 18 May 2026. Current order took effect 11 Oct 2026, 5:00 pm EDT | 4:59 pm US Eastern time on 10 Nov 2026 (the order says "EDT"), unless renewed, changed or ended earlier | CDC. Federal Register 91 FR 65556, FR Doc 2026-21036, 15 Oct 2026. CDC entry suspension page |
| CDC attestation (order of 22 Oct 2026, amended 28 Oct 2026) | Every person on a flight to the US from a foreign country: any nationality, US citizens and green card holders included, connecting passengers included. Crew on duty included, and crew positioning on the flight (deadheading). Commercial, cargo, general aviation and private flights. Flights from preclearance airports included. Flights from a foreign country into a US territory, such as Guam, Saipan or San Juan, included, because the order counts the territories as part of the United States. Flights from a US territory to the mainland are not foreign departures and are not covered | Each person attests that they were not in the DRC in the 21 days before boarding. One authorised representative may attest for each member of a travelling party. Anyone who was in the DRC, even on a connection at a DRC airport without leaving the plane, cannot sign and cannot board until day 22. Airlines must check the attestation before boarding, refuse anyone without one and keep a record for each person | Flights departing at or after 11:59 pm EST on 3 Nov 2026 (05:59 on 4 Nov, Paris time) | 18 Dec 2026, unless CDC extends it. CDC can rescind or change it earlier | CDC. Order of 22 Oct 2026, amended order of 28 Oct 2026 and the CDC attestation page, updated 30 Oct 2026. Federal Register 91 FR 68518, FR Doc 2026-22211, 30 Oct 2026. First order: 91 FR 67582, FR Doc 2026-21828, 27 Oct 2026. Checklist: CDC Ebola attestation checklist |
| DHS arrival restriction (designated airports) | Flights carrying anyone who was in the DRC, Uganda or South Sudan in the 21 days before entry. This DHS rule excludes crew and cargo-only flights. The CDC attestation does not | Those flights may land only at Washington Dulles (IAD), Atlanta (ATL) or New York JFK, where CDC runs entry screening. Until 3 Nov this includes US citizens coming from the DRC. From 3 Nov it mainly concerns US citizens and nationals coming from Uganda or South Sudan, and people holding an exception | Flights departing after 11:59 pm EDT on 20 May 2026. IAD from the start. ATL, Houston IAH and JFK added in May. IAH removed for flights departing after 11:59 pm EDT on 31 Aug 2026 | No end date. It stays until changed or revoked in the Federal Register. CBP can change the airport list by an advisory on cbp.gov | DHS. 91 FR 29896, 21 May 2026. CBP advisories of 21 May, 24 May and 31 Aug 2026. CDC returning-travellers page |
| Kenya: State Department advisory Level 3 "Reconsider travel" | US citizens travelling to Kenya | Advice, not an entry rule. Kenya is not in either CDC order or on the DHS airport list. CDC's Travel Health Notice for Kenya is Level 1 "Practice usual precautions" | Advisory issued 19 Oct 2026 | No end date | travel.state.gov Kenya advisory; CDC Travel Notices |
Kenya's own Ebola rules (screening and a health declaration on entry and exit) are in our Kenya Ebola entry and exit rules guide.
The CDC Ebola attestation: what airlines must do from 3 November
From flights departing at or after 11:59 pm EST on 3 November 2026, airlines must check that every person on board has a completed, signed attestation before boarding. That includes crew. They must refuse anyone without one and keep a record for each person for at least 42 days.
CDC amended the order on 28 October 2026. The amended order was published in the Federal Register on 30 October (91 FR 68518). It changes "passenger" to "person" so that crew are covered, and it names cargo flights. The start and end dates did not change.
Who signs
Every person on the aircraft needs an attestation. The amended order defines "person" as anyone on an aircraft bound for the US from a foreign country, "including passengers, air crew, or conveyance operators". That includes crew on official duty, whether they operate the flight or are positioning on it (deadhead status). It covers commercial, cargo, general aviation and private aircraft. CDC's FAQ adds that people on flights from preclearance airports are covered.
Travelling parties and authorised representatives
The airline must have a record that an attestation was completed for each person on every flight. One authorised representative may attest on behalf of each member of a travelling party. The order defines an authorised representative as a parent, guardian, travel companion, adult member of the same travelling party, or a person the traveller has authorised. A parent or other authorised representative may sign for anyone under 18. A representative may also act for anyone who cannot act on their own behalf, for example because of age or a physical or mental impairment.
Airline staff may help with data entry at the traveller's direction. That does not make them the authorised representative. The traveller, or their representative, still gives the attestation.
US territories
The order uses the definition of the United States in 42 CFR 71.1(b): the 50 states, the District of Columbia and the territories, including American Samoa, Guam, the Northern Mariana Islands, Puerto Rico and the US Virgin Islands. A flight from a foreign country to Guam, Saipan or San Juan is covered, and every passenger on it signs. A flight from a US territory to the mainland is not a departure from a foreign country, so it is not covered.
What counts as "present in the DRC"
Any physical presence counts, by air, land or sea. A connection at a DRC airport counts even if the person never left the plane. Overflights do not count. Day 0 is the day the person leaves the DRC, and they may board a flight to the US from day 22.
Example: a traveller who left Kinshasa on 1 November may board a US flight from 23 November.
Airline duties, as written in the order
- Confirm, at or before boarding, that every person boarding or on board has a completed and signed attestation. "Confirm" means the airline has reviewed it and found it complete and signed "on the face of the attestation".
- Do not board anyone who has not completed and presented one.
- Keep a paper or digital copy for at least 42 days and give it to the US government on request. CDC's texts count the 42 days from departure in one place and arrival in another, so counting from arrival covers both.
Format and channel
Paper and digital both work, including an authenticated digital signature or an electronic checkbox. An airline may collect it at check-in, at the gate or at another point before boarding. The person or their representative must review the attestation text. Each electronic attestation needs a unique record kept for 42 days. For a travelling party, one electronic workflow may record an attestation made for each member. CDC encourages airlines to build it into paperless check-in.
Airlines may also accept a verbal attestation. The person, or their representative, first reviews the attestation text in print or on a screen. The agent asks them to confirm they were not in the DRC in the 21 days before boarding. The agent then records that they reviewed the text and gave the attestation. The system must create a unique electronic record kept for 42 days.
Airlines must show all of the Attachment A text, including the OMB control number and expiry date. The disclosure and privacy text may sit behind a hyperlink on a screen. CDC publishes the attestation text (Attachment A) and a fillable PDF for airlines. Passengers do not file it with CDC. CDC tells them to check with their airline how it collects the attestation.
What to keep ready if CDC asks
Keep the first and last name, the PNR if there is one, the airline and carrier code (or the aircraft registration for other operators), the flight number, the departure and arrival airports, and the dates and times of travel. Do not send attestations through APIS. CDC's FAQ says so, and says CDC will give instructions if it asks for a record.
Translations
CDC says it will provide the attestation in Spanish and French as soon as they are available. Airlines may provide translations into other languages, directly or through a third party, including a third-party digital application. The airline has sole legal responsibility for the accuracy of any translation and cannot shift it to a third party. The attestation text published with the 22 October order says CDC-approved translations will be made available online and that the English text controls over any translation. CDC's FAQ also lets airlines use and keep an attestation only in a foreign language.
Penalties
An airline that fails its duties may face criminal penalties, with fines of up to $200,000 for an organisation and up to $100,000 for an individual. If an operator cannot confirm attestations for all persons on board, the flight does not get "controlled free pratique", the permission to disembark passengers in the US. A passenger who knowingly signs a false attestation can be prosecuted under 18 U.S.C. § 1001. CDC expects that TSA may add its own compliance mechanism. We found none on the CDC attestation page as of 2 November. CDC's page cites a DOT Enforcement Notice of 28 October 2026. It says DOT's consumer protection office will not take action against an airline for strictly applying the order to travellers who cannot present the attestation.
Exemptions
The order lists two. One covers aircraft carrying Ebola patients under US government authorisation. The other covers individuals CDC exempts on humanitarian or government grounds, for example a medical evacuation. US citizens are not exempt. Crew are not exempt. The amended order of 28 October names them as covered.
Step-by-step checklist for check-in, OTAs and TMCs: CDC Ebola attestation checklist for airlines and OTAs.
The CDC entry suspension: DRC, Uganda and South Sudan
Non-US citizens, including green card holders, who were in the DRC, Uganda or South Sudan in the last 21 days cannot enter the US. US citizens and US nationals are not covered by this order.
Who is covered and who is not
- Covered: non-US citizens and non-US nationals who were in any of the three countries in the last 21 days, whatever their passport. Green card holders are covered.
- Not covered: US citizens and US nationals.
- Not covered: US military and government personnel serving overseas, with their spouses and children, subject to the required assurances.
- Not covered: people whom customs officers, with a supervisor's approval, decide to except.
- Not covered: people who enter on an exception CDC grants provisionally and confirms at entry.
Transit counts
CDC says the restriction applies "even if they were on an airplane that stopped at an airport in South Sudan or Uganda regardless of whether they disembarked".
Renewal history
The first order dates from 18 May 2026. An amended order of 22 May removed the green card exemption. New orders followed on 21 June, 13 July, 12 August, 11 September and 11 October 2026, each for 30 days. CDC has renewed this order every month since May. As of 2 November 2026, no renewal had been published in the Federal Register or on the CDC order page, so the current order still runs to 4:59 pm on 10 November 2026. Check the next renewal around 10 November. The current order and its checklist are in CDC extends the Ebola entry ban to 10 November.
How the two CDC orders fit together
The attestation "operates in addition to, and does not supersede" the entry suspension, according to the attestation order's section on its relationship to other orders. The matrix below shows how the two apply together from 3 November.
| Was in the last 21 days | US citizen or US national | Everyone else, green card holders included |
|---|---|---|
| DRC, even a connection | Cannot board a US flight until day 22 (attestation, from 3 Nov) | Cannot board (attestation, from 3 Nov) and cannot enter (entry suspension) |
| Uganda or South Sudan, not the DRC | Can travel. Signs the attestation. The flight is routed to IAD, ATL or JFK for screening | Cannot enter the US until 21 days after leaving |
| None of these | Signs the attestation | Signs the attestation |
Crew sign the attestation too. Exceptions granted by CDC or customs officers are not shown. This summarises the orders. It is not a decision about any one passenger.
Designated airports: IAD, ATL and JFK
Flights to the US carrying anyone who was in the DRC, Uganda or South Sudan in the last 21 days may land only at Washington Dulles, Atlanta or New York JFK.
At those airports, the CDC returning-travellers page describes the steps. Staff escort the traveller to a screening area. The traveller answers a short questionnaire, has their temperature checked and is observed. CDC then enrols them in text-message monitoring for 21 days after they left the country.
For OTAs, this changes routing. A US citizen coming from Uganda and booked into Chicago or Los Angeles needs a routing via IAD, ATL or JFK. CDC tells travellers: "Your airline should be able to work with you to rebook your flights, if needed." Flag such itineraries at booking.
The list started with IAD only, for flights departing after 11:59 pm EDT on 20 May. CBP added Atlanta, Houston IAH and New York JFK in May, in advisories of 21 and 24 May, and removed IAH for flights departing after 11:59 pm EDT on 31 August. CBP can change the list with a simple advisory, so check the CBP announcements page rather than a saved copy.
Kenya: a Level 3 advisory, not a US travel ban
Kenya is not on any US Ebola entry list. On 19 October 2026 the State Department raised Kenya to Level 3 "Reconsider travel", citing health among other risks. That is advice to US citizens, not a rule for airlines. CDC's Ebola notice for Kenya is Level 1.
Kenya's own rules apply to anyone travelling there: screening, a health declaration on entry and exit, and a surveillance form for arrivals from listed countries. See US raises Kenya travel advisory to Level 3 and our Kenya Ebola entry and exit rules.
If the US adds Kenya or any other country to an order, this table changes the same day.
What OTAs and TMCs should change in their booking flow
Five changes cover most of it. The full checklist lives in our CDC Ebola attestation checklist.
- Add a line to every US booking confirmation and pre-trip email from now to at least 18 December: each traveller needs a signed health statement for any flight to or through the US. One adult may sign for the whole travelling party, and each airline sets how it collects it.
- Ask the 21-day travel question for US itineraries, including stops on multi-leg trips. Ask about the DRC for everyone, and about Uganda or South Sudan for non-US citizens.
- Flag itineraries that only connect through the US, for example Latin America to Asia via a US hub. Those passengers sign too. Our guide to transit visas covers the visa side of connections.
- Route US citizens recently in Uganda or South Sudan via IAD, ATL or JFK.
- Treat the attestation as separate from visas and ESTA. An ESTA or a visa does not cover it, and neither exempts anyone from the entry suspension. See the ESTA fee is now $40.62 and what airlines check before boarding.
For passengers who are refused boarding, CDC lists an official contact, [email protected], on its returning-travellers page. CDC gives it for travellers who have been outside the three countries for more than 21 days and need help with a travel restriction. Writing to it does not guarantee any outcome.
Your booking flow already knows the passenger's route and nationality. Rules like this one change often. This one changed on 28 October, before it took effect. Check the dated table above before you brief your teams.
Get a test key · Try the requirements checker
SimpleVisa for airlines and online travel agencies.
Other countries' Ebola entry forms
Several countries added Ebola health declarations or forms in 2026, including Kenya, Tanzania and India. They are listed in our arrival cards and pre-arrival forms by country hub, with official links.
FAQ
Do US citizens have to sign the CDC Ebola attestation?
Yes. From flights departing at or after 11:59 pm EST on 3 November 2026, every person on a flight to the United States signs it, including US citizens, US nationals, green card holders and crew. A US citizen who was in the DRC in the 21 days before boarding cannot board until day 22.
Does the attestation apply to flights to Guam, Saipan or Puerto Rico?
Yes, when the flight comes from a foreign country. The order counts the US territories, including Guam, the Northern Mariana Islands and Puerto Rico, as part of the United States, so a flight from abroad into Guam, Saipan or San Juan is covered. A flight from a US territory to the mainland is not a foreign departure, so it is not covered.
Do connecting passengers have to sign it?
Yes. CDC says the attestation applies to any flight landing in the United States, even if the passenger is only connecting to another country. Flights departing from US preclearance airports are covered too. Overflights that do not land in the United States are not covered.
Do airline crew have to sign the CDC attestation?
Yes. CDC's amended order of 28 October 2026 changed "passenger" to "person". Crew on official duty must attest, whether they operate the flight or are positioning on it in deadhead status. This applies on passenger and cargo flights.
Can one person sign the attestation for a whole family or group?
Yes. One authorised representative, such as a parent, guardian, travel companion or adult member of the same travelling party, may attest on behalf of each member. The airline must still keep a record that an attestation was completed for each person.
What counts as being in the DRC?
Any physical presence in the Democratic Republic of the Congo by air, land or sea counts, including a connection at a DRC airport without leaving the plane. Overflights do not count. Day 0 is the day the traveller leaves the DRC. They may board a flight to the United States from day 22.
Is Kenya on the US Ebola travel ban?
No. Kenya is not covered by either CDC order or by the DHS airport routing. The State Department raised Kenya to a Level 3 "Reconsider travel" advisory on 19 October 2026, which is advice to US citizens. Kenya has its own Ebola screening and health declaration rules.
Who cannot enter the US because of Ebola?
Under CDC's entry suspension, non-US citizens and non-US nationals who were in the DRC, Uganda or South Sudan in the last 21 days cannot enter, green card holders included. A few exceptions apply, such as US government personnel serving overseas and cases approved by customs officers or CDC.
Which US airports handle travellers from Uganda and South Sudan?
Flights carrying anyone who was in the DRC, Uganda or South Sudan in the last 21 days must land at Washington Dulles (IAD), Atlanta (ATL) or New York JFK, where CDC runs entry screening. Houston IAH left the list for flights departing after 11:59 pm EDT on 31 August 2026.
How long do the US Ebola travel restrictions last?
The entry suspension runs to 4:59 pm US Eastern time on 10 November 2026 unless CDC renews, changes or ends it. CDC has renewed it every month since May, and no renewal had been published as of 2 November 2026. The attestation runs until 18 December 2026 unless CDC extends it, and CDC can end it earlier. The 28 October amendment did not change those dates. The airport routing has no end date.
Sources
Sources checked on 26 October 2026 (Paris). CDC attestation and entry suspension pages, Federal Register and CBP announcements checked again on 2 November 2026.
- CDC, Order: Requirement for Attestation by All Persons Traveling by Air to the United States, published 22 October 2026, updated 30 October 2026: the amended order, Attachment A, the fillable PDF, technical instructions and FAQs (crew, cargo, preclearance, travelling parties, verbal attestation, Spanish and French forms, APIS). Checked 2 November 2026.
- Federal Register, 30 October 2026, 91 FR 68518, FR Doc 2026-22211: "Notice of Amended Order Requirement for Attestation by All Persons Arriving in the United States From Any Foreign Country Via Transportation by Aircraft...". Amended order issued 28 October 2026. Same dates: effective 11:59 pm EST on 3 November 2026, in effect through 11:59 pm EST on 18 December 2026. Definitions of "Person(s)", "Aircraft" and "Authorized representative". Checked 2 November 2026.
- Federal Register, 27 October 2026, 91 FR 67582, FR Doc 2026-21828: "Requirement for Attestation for All Airline or Other Aircraft Passengers Arriving in the United States From Any Foreign Country and Controlled Free Pratique for Airlines Confirming That Such Passengers Have Not Been in the Democratic Republic of the Congo in the Past 21 Days". Same dates as the signed order: effective 11:59 pm EST on 3 November 2026, in effect through 11:59 pm EST on 18 December 2026. Definitions of "United States" and "foreign country", carrier duties and translations. Checked 27 October 2026. Amended on 28 October 2026, see the line above.
- CDC Notice and Order of 22 October 2026 under 42 CFR 71.20, 71.31(b) and 71.32(b), signed PDF linked from the CDC page above: effective date, 18 December 2026 end date, carrier duties, penalties, relationship to other orders and the Attachment A text on translations. Checked 26 October 2026.
- CDC, Order: Suspending the Right to Introduce Certain Persons from Countries Where a Quarantinable Communicable Disease Exists, updated 11 October 2026, with the renewal history. Checked 2 November 2026: no newer order listed.
- Federal Register, 15 October 2026, 91 FR 65556, FR Doc 2026-21036: the 11 October order, its scope and exceptions, and its end at 4:59 pm on 10 November 2026. Docket CDC-2026-0892. Checked 26 October 2026.
- Federal Register, 21 May 2026, 91 FR 29896, FR Doc 2026-10179, DHS arrival restrictions for flights carrying persons recently in the DRC, Uganda or South Sudan. Checked 26 October 2026.
- CBP, Modification of List of Designated Airports Regarding Arrival Restrictions, 31 August 2026: IAH removed; IAD, ATL and JFK remain. Earlier advisories of 21 and 24 May 2026 are on the CBP announcements page. Checked 26 October 2026.
- CDC, Information for Travelers Returning from Ebola-Affected Areas, updated 22 October 2026: designated airports, screening steps and the DHS help address. Checked 26 October 2026.
- US Department of State, Kenya Travel Advisory, Level 3, issued 19 October 2026. Checked 26 October 2026.
- CDC, Travel Health Notices: Kenya Level 1 (19 October 2026); DRC and Uganda Level 2; Ituri and Nord-Kivu Level 4; Haut-Uélé and Tshopo Level 3. Checked 26 October 2026.
- Federal Register search: no newer CDC entry suspension order and no newer DHS routing notice. Checked 2 November 2026. CBP announcements: the latest designated airports advisory is still 31 August 2026. Checked 2 November 2026.
For case and death counts, see CDC's Ebola Outbreak: Current Situation.
Information for travel businesses, not legal advice. This page describes what the orders say. It does not decide whether any passenger may board or enter. Check a trip in the requirements checker or read the developer docs.