FB pixel

EU watchdog rules airport biometrics must be passenger-controlled to comply with GDPR

EU watchdog rules airport biometrics must be passenger-controlled to comply with GDPR
 

The use of facial recognition to streamline air passenger’s travel journeys only complies with Europe’s data protection regulations in certain circumstances, the European Data Protection Board has ruled.

The EDPB issued the ruling in response to a request from the French Supervisory Authority to issue an opinion on whether biometric authentication by airlines or airports complies with the EU’s General Data Protection Regulation.

In its “Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR,” the EDPB finds that

Article 5 of GDPR covers principles for processing personal data. Clause (e) limits data storage, while clause (f) relates to integrity and confidentiality. Article 25 addresses “data protection by design and default,” and article 32 deals with security of processing.

The EDPB considered four scenarios for biometric passenger processing. One involves the biometric template being stored on an end-users’ device, and controlled by them. Second is a model of centralized template storage in which the data is encrypted, and the key held by the end user. Third, centralized storage of encrypted biometric data with the key in the hands of the airport operator. The fourth scenario is the same as the third, only with the data stored in the cloud.

The EDPB says both the third and fourth scenarios “cannot be compatible with Article 25 GDPR. Also, such processing would not comply with the principle of integrity and confidentiality under Article 5(1)(f) and Article 32 GDPR” unless further measures are taken.

The fourth scenario would also fail to comply with GDPR article 5(1)(e).

The digital travel credentials (DTCs) being piloted with EU Commission backing would avoid the violations by following the model of the first scenario considered by the EDPB.

In the meantime, airport biometrics continue to roll out across Europe, with Spain introducing facial recognition scanners in an example from earlier this year.

Related Posts

Article Topics

 |   |   |   |   |   | 

Latest Biometrics News

 

Biometrics contracts span immigration, law enforcement and travel tools

New contracts for biometrics with immigration, law enforcement and airport authorities are generating millions of dollars for a handful of…

 

Oxford program to study DPI impact on social, financial inclusion

Oxford University’s Blavatnik School of Government has announced the establishment of the Oxford Digital Public Infrastructure Research Lab (OxDPI), an…

 

Idemia makes OEM pitch for biometric modules

A recent webinar from Idemia Public Security looks at how original equipment manufacturers (OEMs) can integrate seamless security into devices…

 

ICE wants biometric monitoring devices for alternative to detention program

US Immigration and Customs Enforcement (ICE) issued a Request for Information (RFI) for biometric monitoring devices as part of its…

 

Biometrics coming to more stadiums with facial recognition tender in NSW

Venues New South Wales (VNSW) has issued a tender for facial recognition systems to be deployed at Stadium Australia (Accor…

 

FinGo supplying vein biometrics to boost gold mining transparency

SMX – a company operating in the so-called circular economy – is collaborating with finger vein biometrics firm FinGo in…

Comments

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.

Most Read This Week

Featured Company

Biometrics Insight, Opinion

Digital ID In-Depth

Biometrics White Papers

Biometrics Events