We are currently consulting on this draft guidance.
About this guidance
Key data protection concepts
- What is personal data?
- What is biometric data?
- What is special category biometric data?
- What about other special category data?
Biometric recognition
- What is "biometric recognition"?
- What can we use biometric recognition for?
- Do biometric recognition systems use personal data?
- Do biometric recognition systems use biometric data?
- The information is about someone’s physical, physiological or behavioural characteristics.
- The information results from specific technical processing
- The information allows or confirms someone’s unique identification.
- Do biometric recognition systems use special category biometric data?
Data Protection requirements when using biometric data
- Do we need to do a DPIA?
- Who is the Controller if our biometric recognition system?
- Do we need explicit consent when we process special category biometric data?
- What other conditions might apply for biometric recognition?
- Prevention and detection of unlawful acts
- Research
- What if we don’t have consent and no other condition applies?
- Can we use a biometric recognition system to make automated decisions about someone?
- What else do we need to consider?
- How do we deal with accuracy risks?
- How do we deal with risks of discrimination?
- How do we deal with security risks?