FB pixel

FIDO Alliance stresses differences in MFA technologies, sensitivity of biometric data as GDPR takes effect

 

As the EU’s General Data Protection Regulation (GDPR) comes into effect, the FIDO Alliance has published a post outlining its perspective on the law, sharing three things that every organization should know about it.

The data protection safeguards GDPR requires of companies doing business with EU citizens are only complete, in FIDO’s view, if they include multi-factor authentication (MFA). The group says 81 percent of all breaches last year were due to weak or stolen passwords, but also warns that hackers have learned how to bypass first-generation MFA technologies, making it important to chose the right MFA solution.

GDPR’s requirement of consent from individuals to process their data also requires that organizations authenticate the identity of those individuals, FIDO points out. In the case of sensitive data, that consent must be explicit.

Finally, while biometrics can deliver strong personal authentication to help meet GDPR requirements, biometric data is classified as “sensitive” by GDPR. Therefore, any entity using biometrics must make sure that use is compliant, and that data is robustly protected.

FIDO also offers a whitepaper about using FIDO authentication for GDPR compliance (PDF).

Professors of Accounting Paul Sheldon Foote and Sumantra Chakravarty examined issues relating to biometrics and GDPR compliance in a recent guest post for Biometric Update.

Article Topics

 |   |   |   | 

Latest Biometrics News

 

New Ofcom proposal calls for highly effective age assurance for livestreams

Ofcom is determined to make the most of its “Year of Action,” having released yet another set of proposals to…

 

World Economic Forum looks to get a GRIP on global regulatory environment

A new piece written by the World Economic Forum (WEF)’s head of digital inclusion, Kelly Ommundsen, looks at the gap…

 

Respected legal authority frames age assurance legislation as segregation, suppression

Language plays a fundamental role in how concepts and technologies are introduced into and evolve alongside society. The debate over…

 

New high scores in fingerprint biometrics accuracy for Dermalog, ROC, Innovatrics

New algorithms submitted to the U.S. National Institute of Standards and Technology for its Proprietary Fingerprint Template (PFT) Evaluation have…

 

Australia’s safety code for search tools takes effect, with age verification rules

Like its counterparts in the EU and UK, Australia’s digital regulator is beginning to formalize its online safety codes. The…

 

Age verification coming to major video game mod site in EU, UK

Want to make sweet love to that frost giant who lives in the fjord? You may have to prove your…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Biometric Market Analysis

Most Viewed This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events