Biometric Data
What is Biometric Data?
Personal data resulting from specific technical processing relating to the physical, physiological, or behavioural characteristics of a natural person, such as facial images or fingerprint data. Classified as special category data under GDPR.
Terms that appear alongside biometric data
Each of these is named in at least one of the same controls as biometric data. The number is how many controls name both.
- consent 58 shared controls
- gdpr 34 shared controls
- genetic data 27 shared controls
- data subject 27 shared controls
- health data 26 shared controls
- sensitive personal data 24 shared controls
- data protection 17 shared controls
- profiling 12 shared controls
Frameworks that govern biometric data
What the standards actually require on biometric data
Requirements naming biometric data across 6 standards, quoted from the control text.
Article 12 of the Kazakhstan PDPL establishes the data localization requirement for biometric personal data of Kazakhstan citizens and residents - a key sovereignty provision strengthened by the 2022 amendment.
KZ-PDPL-Biometric-Data-Localization-Article12-Server-Kazakhstan-On-Soil-Data-Storage-Citizens-Residents · Kazakhstan PDPL Biometric Data Localization + Article 12 + Mandatory Server Storage in Kazakhstan + 2022 Amendment + Citizens + Residents + Foreign Cloud Provider Restrictions + Data Sovereignty + State Service for Information Security Oversight →Processing employees' biometric data for recording working time and for entry/exit to official premises is permitted where prescribed by law, or as an alternative to another time/access solution, provided the employee gave explicit consent under the GDPR.
HR-GDPR-Art.23 · Biometric Data of Employees (Time and Access) →Per 152-FZ Articles 10 + 11: special categories + biometric. Requirements include (a) Special Categories of Data (Article 10) prohibited processing without specific consent or legal basis including race + ethnicity + political + religious + philosophical + hea...
RUSPD-4 · Special Categories, Biometric Data →Biometric data is sensitive personal data under TDPSA, requiring opt-in consent. Texas Capture or Use of Biometric Identifier (CUBI) Act (§ 503.001) imposes additional pre-capture notice, written consent, retention limits, and prohibition on sale (with narrow...
TDPSA-541-101-BIOMETRIC · Biometric Data Handling (TDPSA and CUBI Overlap) →Genetic and biometric data. Section 25 imposes specific conditions on the processing of genetic and biometric personal data.
BW-DPA-s25 · Processing of genetic and biometric data →Biometric personal data may be processed only with the written consent of the data subject, except in cases related to administration of justice, state security, counter terrorism and other purposes expressly provided by law.
UZB-DPL-09 · Biometric Data Protection →Questions people ask about biometric data
What is Biometric Data?
Why is Biometric Data important for compliance?
Which compliance frameworks address Biometric Data?
Where can I learn more about Biometric Data?
See how Biometric Data applies across compliance frameworks
Our platform maps 686 frameworks with 311K cross-framework control mappings. Explore how this concept is addressed across standards.