Fingerprints, faces and voices.
WHAT MAKES IT DIFFERENT
It is unique, permanent and cannot be changed if compromised.
WHY THAT MATTERS
A leaked password can be replaced; a leaked fingerprint cannot.
WHAT IT IS USUALLY TREATED AS
A sensitive category, requiring an additional condition.
WHERE IT ARISES
Attendance systems Access control Identity verification Device authentication
WHAT TO ESTABLISH FIRST
Whether a less intrusive method would work.
WHAT ALTERNATIVES EXIST
Cards Codes Ordinary credentials
WHY THAT QUESTION MATTERS
If an alternative achieves the purpose, biometrics are unlikely to be necessary.
WHAT EMPLOYEE USE REQUIRES PARTICULAR CARE ABOUT
Consent, which is rarely free in employment.
WHAT TO PROVIDE
A genuine alternative for those who object.
WHAT TO STORE
A template, not the raw image, where possible.
WHY
It reduces what a breach exposes.
WHAT TO SECURE
Storage, with encryption and strict access.
WHAT TO SET
Short retention, and deletion on departure.
WHAT TO ASSESS
An impact assessment, almost certainly required.
WHAT TO DOCUMENT
The necessity assessment, the condition relied on, and the alternatives offered.
WHAT TO TAKE ADVICE ON
Any biometric deployment.
