At face value 

On biometrical identification and privacy

New ways of doing business are developing at a quick pace. Activities that were once part of our everyday lives are more and more replaced by information technology. In the near future many transactions will no longer be performed by traditional methods, like face-to-face contacts or regular mail. Instead computer networks will be the new vehicles. As persons are physically separated, new and secure methods of identification and authentication are required. The most promising method certainly is biometrical identification, the use of unique human characteristics for these purposes. The widespread introduction of techniques applying biometrics can now be witnessed.

The promise of biometrical identification as a method for secure identification is accompanied by concerns about privacy. The biometrical data, by their nature as unique identifiers, may become a key to track a person's everyday activities. Also the biometrical data may reveal much additional information about a person, such as health status or race.

This report reviews the technologies available for biometrical identification. It also offers guidelines, both from a legal and from a technological perspective, how biometrical identification can be applied in such a way that the privacy of citizens is respected and protected. Applications can be configured to give data subjects the ability to control access to their own biometrical data, to safeguard the integrity of their personal information, and to protect their identity against theft or misappropriation. I hope these guidelines will help to preserve the human face of the information society.

Contents

  • Preface
  • 1 Introduction
  • 2 Biometrics: a technology scan
  • 3 Legal aspects
  • 4 Biometrical identification and privacy-related issues
  • 5 Biometrics and Privacy-Enhancing Technologies
  • 6 Conclusions and practical directions
    • Appendix A Privacy-Enhancing Technologies
    • Appendix B Terminology used in Directive 95/46/EC
    • Summary
    • Samenvatting

Citation
Hes, dr. R., Hooghiemstra, mr. drs. T.F.M., Borking, drs. J.J., At face value. On biometrical identification and privacy Dutch DPA, September 1999. Background studies & Investigations 15.
With contributions from: P.J.A. Verhaar, T.G.A. van Rhee and H.A.M. Luiijf (TNO Physics and Electronics Laboratory - The Hague)