New Privacy Rules for Biometrics
The Office of the Privacy Commissioner (OPC) has announced it will release a draft policy code early this year regulating the collection and use of biometric information. The code will have direct implications for any businesses dealing with biometric information.
Biometric information is any information about a person’s biological or behavioural characteristics, such as fingerprints, face, voice or eyes. It is increasingly common for businesses to collect and use biometric information to verify people’s identities online, enhance retail security, control access to devices or physical spaces, or to monitor attendance at a site or a work place.
While the use of biometrics has significant benefits for businesses, it also increases the risks of profiling, discrimination, bias, and lack of transparency and control to individuals.
The OPC has proposed three categories of rules that businesses must comply with when collecting and using biometric information. These are:
1. Proportionality assessment: Businesses must undertake a proportionality assessment to ensure that the reasons for collecting biometric information outweigh the risk of privacy intrusion
2. Transparency and notification: Businesses must be open and transparent with individuals and the public about the collection and use of their biometric information, and
3. Purpose limitations: The collection and use of biometric information will be restricted for certain purposes.
The public will have an opportunity to provide feedback on the code before it is implemented.
DISCLAIMER: All the information published is true and accurate to the best of the authors’ knowledge. It should not be a substitute for legal advice. No liability is assumed by the authors or publisher for losses suffered by any person or organisation relying directly or indirectly on this article. Views expressed are those of individual authors, and do not necessarily reflect the view of this firm. Articles appearing in this newsletter may be reproduced with prior approval from the editor and credit given to the source. Copyright, NZ LAW Limited, 2019. Editor: Adrienne Olsen. E-mail: adrienne@adroite.co.nz. Ph: 029 286 3650 or 04 496 5513