Legal Protection of Biometric Data in the Digital Environment
Corresponding Author(s) : Dr. Ahmed Ragab sameida
Journal of Law and Emerging Technologies,
Vol. 5 No. 1 (2025)
Abstract
Biometric technology, when developed and used responsibly, offers considerable benefits in various fields such as security and healthcare. Nevertheless, its deployment can significantly threaten the fundamental right to privacy. This study reveals to identify Biometric data and its manifestations, examining the risks associated with the general deployment of this technology, particularly those related to data protection rights. It further reviews the methods and mechanisms provided by the European Union's "Artificial Intelligence Act" to mitigate these risks, and its adequacy in achieving effective protection of that data, ultimately striving for a legal framework that aims to balance the necessity of encouraging innovation with the protection of individual rights.
Keywords
Download Citation
Endnote/Zotero/Mendeley (RIS)BibTeX
- Books
- Els J Kindt, Privacy and Data Protection Issues of Biometric Applications: A Comparative Legal Analysis (Springer 2013) 369. DOI: https://doi.org/10.1007/978-94-007-7522-0
- J Breebaart, B Yang, I Buhan-Dulman and C Busch, ‘Biometric Template Protection’ (2009) 301. DOI: https://doi.org/10.1007/s11623-009-0089-0
- P Hacker and J-H Passoth, ‘Varieties of AI Explanations under the Law. From the GDPR to the AIA, and Beyond’ in A Holzinger, R Goebel, R Fong, T Moon, K-R Müller and W Samek (eds), xxAI - Beyond Explainable AI, vol 13200 (Springer 2022) 343 https://doi.org/10.1007/978-3-031-04083-2_17 DOI: https://doi.org/10.1007/978-3-031-04083-2_17
- P Hacker, ‘The Ambivalence of Algorithms: Gauging the Legitimacy of Personalized Law’ in M Bakhoum, B Conde Gallego, M-O Mackenrodt and G Surblytė-Namavičienė (eds), Personal Data in Competition, Consumer Protection and Intellectual Property Law (Vol 28, Springer 2018) 85 https://doi.org/10.1007/978-3-662-57646-5_5 DOI: https://doi.org/10.1007/978-3-662-57646-5_5
- W Boron and E Boulpaep, Medical Physiology (Elsevier 2008).
- Journal Articles
- ‘‘Use of Facial Recognition Technology for Medical Purposes: Balancing Privacy with Innovation’ (2016) 43(4) Pepperdine Law Review 1017, 1022.
- A K Jain, A Ross and S Pankanti, ‘A Prototype Hand Geometry-based Verification System’, in Proceedings of the Second International Conference on Audio- and Video-Based Biometric Person Authentication (AVBPA) (Washington DC, USA, 1999); Joint Research Centre (JRC), Biometrics at the Frontiers (2005) 62.
- Andrea Rosales and Mireia Fernández-Ardèvol, ‘Ageism in the Era of Digital Platforms’ (2020) Convergence https://journals.sagepub.com/doi/full/10.1177/1354856520930905. DOI: https://doi.org/10.1177/1354856520962670
- Ayanna Howard and Charles Isbell, ‘Diversity in AI: The Invisible Men and Women’ (21 September 2020) MIT Sloan Management Review https://sloanreview.mit.edu/article/diversity-in-ai-the-invisible-men-and-women/
- Bashirat Bukola, ‘Artificial Intelligence and the Right to be Forgotten’ (2024) 5(8) International Journal of Research Publication and Reviews https://doi.org/10.55248/gengpi.5.0824.2310 DOI: https://doi.org/10.55248/gengpi.5.0824.2310
- Byoungjun Jeon and others, ‘A Facial Recognition Mobile App for Patient Safety and Biometric Identification: Design, Development, and Validation’ (2019) 7(4) JMIR mHealth and uHealth 1. DOI: https://doi.org/10.2196/11472
- C A Jasserand, ‘Avoiding Terminological Confusion between the Notions of “Biometrics” and “Biometric Data”: An Investigation into the Meanings of the Terms from a European Data Protection and a Scientific Perspective’ (2015) 6(1) International Data Privacy Law. DOI: https://doi.org/10.1093/idpl/ipv020
- C Fontes, E Hohma, CC Corrigan and C Lütge, ‘AI-powered Public Surveillance Systems: Why We (Might) Need Them and How We Want Them’ (2022) 71 Technology in Society 102137 https://doi.org/10.1016/j.techsoc.2022.102137 DOI: https://doi.org/10.1016/j.techsoc.2022.102137
- Clive Norris, ‘From Personal to Digital: CCTV, the Panopticon, and the Technological Mediation of Suspicion and Social Control’ in David Lyon (ed), Surveillance as Social Sorting (Routledge 2002) 249–281 https://doi.org/10.4324/9780203994887 accessed 31 May 2025. DOI: https://doi.org/10.4324/9780203994887
- David Lyon, ‘Surveillance’ (2022) 11(4) Internet Policy Review https://doi.org/10.14763/2022.4.1673 accessed 31 May 2025. DOI: https://doi.org/10.14763/2022.4.1673
- Dian Hong and others, ‘Genetic Syndromes Screening by Facial Recognition Technology: VGG-16 Screening Model Construction and Evaluation’ (2021) 16 Orphanet Journal of Rare Diseases 1. DOI: https://doi.org/10.1186/s13023-021-01979-y
- E Kindt, ‘Having Yes, Using No? About the New Legal Regime for Biometric Data’ (2018) 34Computer Law & Security Review 523. DOI: https://doi.org/10.1016/j.clsr.2017.11.004
- Erik Snijder, Het biometrisch paspoort in Nederland: crash of zachte landing (2010) 70–72.
- Esefan Ortiz, Kevin W Bowyer and Patrick J Flynn, ‘A Linear Regression Analysis of the Effects of Age Related Pupil Dilation Change in Iris Biometrics’ (2013) https://www3.nd.edu/~kwb/Ortiz_Bowyer_Flynn_BTAS_2013.pdf accessed 1 June 2025. DOI: https://doi.org/10.1109/BTAS.2013.6712687
- Faslul Haq, Fathima Nasu Sahana and Nadeeka Dissanayake, ‘Navigating the Ethical and Technological Landscape: The Future Trajectory of Facial Recognition Technology’ (2024) 3 International Journal of Agrobiotechnology and Veterinary Medicine https://sciencebox.uz/index.php/tibbiyot/article/view/9948/9083
- G Gárdonyi, ‘Állóképes Arckép Azonosítás Magyarországon [Still Image Face Recognition in Hungary]’ (2020) 68(3) Belügyi Szemle 22,https://doi.org/10.38146/BSZ.SPEC.2020.3.2 DOI: https://doi.org/10.38146/BSZ.SPEC.2020.3.2
- G Gültekin-Várkonyi, ‘Navigating Data Governance Risks: Facial Recognition in Law Enforcement under EU Legislation’ (2024) 13(3) Internet Policy Review https://doi.org/10.14763/2024.3.1798 DOI: https://doi.org/10.14763/2024.3.1798
- Graham Greenleaf, ‘India’s National ID System: Danger Grows in a Privacy Vacuum’ (2010) Computer Law & Security Review 26(5), 479–491. DOI: https://doi.org/10.1016/j.clsr.2010.07.009
- Gültekin-Várkonyi G, ‘Consent Mechanism in the Life with Social Robots’ (2019) 31(1) European Review of Public Law.
- Hacker P, ‘AI Regulation in Europe: From the AI Act to Future Regulatory Challenges’ (2023) https://doi.org/10.48550/arXiv.2310.04072 accessed 31 May 2025.
- HUMABIO Project, Human Monitoring and Authentication Using Biodynamic Indicators and Behavioral Analysis (EU Sixth Framework Programme, 2006–2008) http://cordis.europa.eu/fetch?CALLER=IST_UNIFIEDSRCH&ACTION=D&DOC=6&CAT=PROJ&QUERY=011e5a6ef5cd:570d:08b193fe&RCN=78373 accessed 31 May 2025.
- I Fábián and GG Gulyás, ‘A Comparative Study on the Privacy Risks of Face Recognition Libraries’ (2021) 25(2) Acta Cybernetica 233 https://cyber.bibl.u-szeged.hu/index.php/actcybern/article/view/4198 accessed 1 June 2025. DOI: https://doi.org/10.14232/actacyb.289662
- J R Matey et al, ‘Iris on the Move: Acquisition of Images for Iris Recognition in Less Constrained Environments’ (2006) Proceedings of the IEEE 1936–1947 http://ieeexplore.ieee.org/Xplore/login.jsp?url=http%3A%2F%2Fieeexplore.ieee.org%2Fiel5%2F5%2F4052463%2F04052478.pdf&authDecision=-203 (‘Matey et al., Iris on the Move, 2006’).
- Koops B-J, ‘The Concept of Function Creep’ (2021) 13(1) Law, Innovation and Technology 29 https://doi.org/10.1080/17579961.2021.1898299 accessed 31 May 2025. DOI: https://doi.org/10.1080/17579961.2021.1898299
- L Basel-Vanagaite and others, ‘Recognition of the Cornelia de Lange Syndrome Phenotype with Facial Dysmorphology Novel Analysis’ (2016) 89(5) Clinical Genetics 557. DOI: https://doi.org/10.1111/cge.12716
- L Urquhart and D Miranda, ‘Policing Faces: The Present and Future of Intelligent Facial Surveillance’ (2022) 31(2) Information & Communications Technology Law 194 https://doi.org/10.1080/13600834.2021.1994220 DOI: https://doi.org/10.1080/13600834.2021.1994220
- Luke Scanlon, ‘What Meaningful Human Oversight of AI Should Look Like’ (2022) Pinsent Masons Out-Law https://www.pinsentmasons.com/out-law/analysis/what-meaningful-human-oversight-of-ai-should-look-like
- M Bromba, ‘Reconstruction of Biometric Raw Data’ (2006).
- N Helberger and N Diakopoulos, ‘ChatGPT and the AI Act’ (2023) 12(1) Internet Policy Review https://doi.org/10.14763/2023.1.1682 DOI: https://doi.org/10.14763/2023.1.1682
- Nathalie A Smuha and others, ‘How the EU Can Achieve Legally Trustworthy AI: A Response to the European Commission’s Proposal for an Artificial Intelligence Act’ (2021) Social Science Research Network https://doi.org/10.2139/ssrn.3899991 DOI: https://doi.org/10.2139/ssrn.3899991
- P Lewinski, J Trzaskowski and J Luzak, ‘Face and Emotion Recognition on Commercial Property under EU Data Protection Law’ (2016) 33(9) Psychology & Marketing 729. DOI: https://doi.org/10.1002/mar.20913
- R Delikat, The Regulatory Gap Between the Law and the Use of Real-Time Facial Recognition Technology by Police in the European Union (Master’s thesis, Tilburg University 2021) 61 https://arno.uvt.nl/show.cgi?fid=155401 accessed 1 June 2025.
- R W Picard, ‘Affective Computing: Challenges’ (2003) 59(1) International Journal of Human-Computer Studies 55. DOI: https://doi.org/10.1016/S1071-5819(03)00052-1
- Rainer Mühlhoff and Hannah Ruschemeier, ‘Updating Purpose Limitation for AI: A Normative Approach from Law and Philosophy’ (22 January 2024) SSRN https://ssrn.com/abstract=4711621 or http://dx.doi.org/10.2139/ssrn.4711621 DOI: https://doi.org/10.2139/ssrn.4711621
- Rezende IN, ‘Facial Recognition in Police Hands: Assessing the “Clearview Case” from a European Perspective’ (2020) 11(3) New Journal of European Criminal Law 375 https://doi.org/10.1177/2032284420948161 accessed 31 May 2025. DOI: https://doi.org/10.1177/2032284420948161
- RP Kosilek and others, ‘Automatic Face Classification of Cushing’s Syndrome in Women – A Novel Screening Approach’ (2013) 121(9) Experimental and Clinical Endocrinology & Diabetes 561. DOI: https://doi.org/10.1055/s-0033-1349124
- RSS Kramer, MO Mireku, TR Flack and others, ‘Face Morphing Attacks: Investigating Detection with Humans and Computers’ (2019) 4 Cognitive Research 28 https://doi.org/10.1186/s41235-019-0181-4 DOI: https://doi.org/10.1186/s41235-019-0181-4
- S Khairnar, S Gite, K Kotecha and SD Thepade, ‘Face Liveness Detection Using Artificial Intelligence Techniques: A Systematic Literature Review and Future Directions’ (2023) 7(1) Big Data and Cognitive Computing 37 https://doi.org/10.3390/bdcc7010037 DOI: https://doi.org/10.3390/bdcc7010037
- Sandra Wachter, ‘Limitations and Loopholes in the EU AI Act and AI Liability Directives: What This Means for the European Union, the United States, and Beyond’ (2024) 26(3) Yale Journal of Law & Technology https://ssrn.com/abstract=4924553 or http://dx.doi.org/10.2139/ssrn.4924553 DOI: https://doi.org/10.2139/ssrn.4924553
- T Züger and H Asghari, ‘AI for the Public: How Public Interest Theory Shifts the Discourse on AI’ (2023) 38 AI & Society 815 https://doi.org/10.1007/s00146-022-01480-5 DOI: https://doi.org/10.1007/s00146-022-01480-5
- Tim Miller, ‘Explanation in Artificial Intelligence: Insights from the Social Sciences’ (2019) 267 Artificial Intelligence 1 https://www.sciencedirect.com/science/article/pii/S0004370218305988 DOI: https://doi.org/10.1016/j.artint.2018.07.007
- U Park, Y Tong and AK Jain, ‘Face Recognition with Temporal Invariance: A 3D Aging Model’ (2010) IEEE Transactions on Pattern Analysis and Machine Intelligence 32(5), 947 https://ieeexplore.ieee.org/document/5413023 accessed 1 June 2025. DOI: https://doi.org/10.1109/TPAMI.2010.14
- VL Raposo, ‘(Do Not) Remember My Face: Uses of Facial Recognition Technology in Light of the General Data Protection Regulation’ (2023) 32(1) Information & Communications Technology Law 45 https://doi.org/10.1080/13600834.2022.2054076 accessed 1 June 2025. DOI: https://doi.org/10.1080/13600834.2022.2054076
- Yichao Ma, Zengxi Huang, Xiaoming Wang and Kai Huang, ‘An Overview of Multimodal Biometrics Using the Face and Ear’ (2020) Mathematical Problems in Engineering https://doi.org/10.1155/2020/6802905 DOI: https://doi.org/10.1155/2020/6802905
- Yuncong Yang and others, ‘From Machine Learning to Machine Unlearning: Complying with GDPR's Right to be Forgotten while Maintaining Business Value of Predictive Models’ (2024) arXiv preprint arXiv:2411.17126 https://arxiv.org/pdf/2411.17126
- International Legal Documents
- Article 29 Data Protection Working Party, Opinion 3/2012 on developments in biometric technologies (WP 193, 27 April 2012).
- Article 29 Data Protection Working Party, Working Document on Biometrics, WP 80, 1 August 2003, 11 (‘WP 29 Working Document on Biometrics 2003 (WP80)’); Article 29 Data Protection Working Party, Opinion 3/2012 on developments in biometric technologies, WP 193, 27 April 2012.
- Charter of Fundamental Rights of the European Union [2012] OJ C326/391.
- Commission Decision of 28 June 2006 laying down the technical specifications on the standards for security features and biometrics in passports and travel documents issued by Member States.
- Consultative Committee of the Convention 108, Guidelines on Facial Recognition (Guideline No T-PD(2020)03rev4, Council of Europe 2021) https://edoc.coe.int/en/artificial-intelligence/9753-guidelines-on-facial-recognition.html accessed 31 May 2025.
- Convention for the Protection of Human Rights and Fundamental Freedoms, Protocol No 12 (opened for signature 4 November 2000, entered into force 1 April 2005).
- Convention for the Protection of Human Rights and Fundamental Freedoms (European Convention on Human Rights, as amended) (ECHR).
- Council of Europe, Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Modernised Convention 108, 2018).
- EDPS (European Data Protection Supervisor), Opinion on the Proposal for a Council Decision on the establishment, operation and use of the second-generation Schengen Information System (SIS II) (2005) 19.
- European Commission, Convergence: Creating the Future Commission. President Jacques Santer Announces 200,000 ECU European IT Prize Winners (25 November 1997) http://cordis.europa.eu/esprit/src/eitcp4en.htm accessed 31 May 2025.
- European Commission, Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act), COM/2021/206 final https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52021PC0206
- European Commission, Shaping Europe’s Digital Future (February 2020) https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52020DC0067
- European Commission, White Paper on Artificial Intelligence – A European Approach to Excellence and Trust, COM(2020) 65 final https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52020DC0065
- European Data Protection Board and European Data Protection Supervisor, Joint Opinion 5/2021 on the Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) (18 June 2021) https://www.edpb.europa.eu/system/files/2021-06/edpb-edps_joint_opinion_ai_regulation_en.pdf
- European Data Protection Board, ‘Facial Recognition: Italian SA Fines Clearview AI EUR 20 Million’ (2022) https://www.edpb.europa.eu/news/national-news/2022/facial-recognition-italian-sa-fines-clearview-ai-eur-20-million_en accessed 31 May 2025.
- European Data Protection Board, Guidelines 05/2020 on Consent under Regulation 2016/679 (May 2020) 7–32 https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf accessed 31 May 2025.
- European Data Protection Board, Guidelines 3/2019 on Processing of Personal Data Through Video Devices (January 2020) 5–23 https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201903_video_devices.pdf accessed 31 May 2025.
- European Data Protection Board, Swedish DPA: Police Unlawfully Used Facial Recognition App (Press release, 2021) https://www.edpb.europa.eu/news/national-news/2021/swedish-dpa-police-unlawfully-used-facial-recognition-app_en accessed 31 May 2025.
- European Parliament, Amendments Adopted by the European Parliament on 14 June 2023 on the Proposal for a Regulation of the European Parliament and of the Council on Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts (2023) https://www.europarl.europa.eu/doceo/document/TA-9-2023-0236_EN.html
- European Union Agency for Fundamental Rights, Handbook on European Data Protection Law: 2018 Edition (FRA, 2018) https://fra.europa.eu/sites/default/files/fra_uploads/fra-coe-edps-2018-handbook-data-protection_en.pdf accessed 31 May 2025.
- International Covenant on Civil and Political Rights (adopted 16 December 1966, entered into force 23 March 1976) 999 UNTS 171 (ICCPR).
- Regulation (EC) No 2252/2004 of 13 December 2004 on Standards for Security Features and Biometrics in Passports and Travel Documents Issued by Member States [2004] OJ L385/1.
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) https://eur-lex.europa.eu/eli/reg/2016/679/oj accessed 31 May 2025.
- Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Artificial Intelligence Act) https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202401689 accessed 31 May 2025.
- Laws
- Act CCXXII of 2015 (Hungary) https://njt.hu/jogszabaly/en/2015-222-00-00
- Reports
- van der Wolk and Morrison & Foerster, ‘The (Im)Possibilities of Scientific Research Under the GDPR’ (Cybersecurity Law Report, 2020) 3–4 https://assets.contentstack.io/v3/assets/blt5775cc69c999c255/bltbb2bb3df1bea55fe/200722-scientific-research-gdpr.pdf accessed 31 May 2025.
- Amba Kak, Regulating Biometrics: Global Approaches and Open Questions (AI Now Institute 2020) https://ainowinstitute.org/publication/regulating-biometrics-global-approaches-and-open-questions
- American Society for Testing and Materials, Standard Guide for Capturing Facial Images for Use with Facial Recognition Systems (ASTM International, 2023) Vol 14.02, No E3115-17 https://doi.org/10.1520/E3115-17 accessed 1 June 2025. DOI: https://doi.org/10.1520/E3115-17
- Amnesty International, ‘EU: Artificial Intelligence Rulebook Fails to Stop Proliferation of Abusive Technologies’ (Amnesty International, 14 March 2024) https://www.amnesty.org/en/latest/news/2024/03/eu-artificial-intelligence-rulebook-fails-to-stop-proliferation-of-abusive-technologies/
- Andy Ashbourn, Social Implications of Wide Scale Implementation of Biometrics (2005) 6.
- Banda J, ‘Inherently Identifiable: Is It Possible to Anonymize Health and Genetic Data?’ (IAPP, 13 November 2019) https://iapp.org/news/a/inherently-identifiable-is-it-possible-to-anonymize-health-and-genetic-data accessed 31 May 2025.
- E Garvie, A Bedoya and J Frankle, The Perpetual Line-Up: Unregulated Police Face Recognition in America [Report] (Center on Privacy & Technology at Georgetown Law 2016) https://www.perpetuallineup.org/risk-framework
- E Jakubowska, Remote Biometric Identification: A Technical & Legal Guide [Guidance] (European Digital Rights 2023) https://edri.org/our-work/remote-biometric-identification-a-technical-legal-guide/
- E Moss and others, Assembling Accountability: Algorithmic Impact Assessment for the Public Interest (Data & Society 2021) https://datasociety.net/library/assembling-accountability-algorithmic-impact-assessment-for-the-public-interest/ DOI: https://doi.org/10.2139/ssrn.3877437
- Europol, ChatGPT: The Impact of Large Language Models on Law Enforcement (Tech Watch Flash) (Europol Innovation Lab, 2023) https://www.europol.europa.eu/publications-events/publications/chatgpt-impact-of-large-language-models-law-enforcement accessed 31 May 2025.
- Gary Roethenbaugh, cited in A Cavoukian, Privacy and Biometrics (Information and Privacy Commissioner, Ontario 1999) 11 http://www.ipc.on.ca/images/Resources/pri-biom.pdf accessed 31 May 2025.
- Joseph Pato and Lynette Millett (eds), Biometric Recognition: Challenges and Opportunities (National Research Council, September 2010) 3 (‘NRC, Biometric Recognition, 2010’).
- Joy Buolamwini and Timnit Gebru, ‘Gender Shades: Intersectional Accuracy Disparities in Commercial Gender Classification’ (Conference on Fairness, Accountability, and Transparency, 2018) https://www.media.mit.edu/publications/gender-shades-intersectional-accuracy-disparities-in-commercial-gender-classification/ accessed 1 June 2025.
- M Gasson, M Meints and K Warwick (eds), D.3.2: A Study on PKI and Biometrics (FIDIS, Frankfurt, July 2005) 82–86.
- Michael Gasson, Martin Meints and Kevin Warwick (eds), D3.2 A Study on PKI and Biometrics, FIDIS (2005) http://www.fidis.net/resources/fidis-deliverables
- Ministerie van Binnenlandse Zaken en Koninkrijksrelaties, Kamerstuk 25 764, nr. 27b1 (2005) 83 https://zoek.officielebekendmakingen.nl/kst-25764-27-b1.pdf accessed 1 June 2025.
- National Institute of Standards and Technology (NIST), ‘NIST Evaluates Face Recognition Software’s Accuracy for Flight Boarding’ (17 July 2021) https://www.nist.gov/news-events/news/2021/07/nist-evaluates-face-recognition-softwares-accuracy-flight-boarding accessed 1 June 2025.
- National Institute of Standards and Technology (NIST), ‘NIST Study Evaluates Effects of Race, Age, Sex on Face Recognition Software’ (19 December 2019) https://www.nist.gov/news-events/news/2019/12/nist-study-evaluates-effects-race-age-sex-face-recognition-software
- National Science and Technology Council (NSTC), Palm Print Recognition (2006). http://www.biometrics.gov/documents/palmprintrec.pdf.
- Organization for Economic Co-operation and Development, Biometric-based Technologies (OECD, DSTI/ICCP/REG(2003)2/FINAL, 30 June 2004, cancelling and replacing the same document of 28 April 2004) 11 (‘OECD, Biometric-based technologies, 2004’).
- Reva Schwartz and others, Towards a Standard for Identifying and Managing Bias in Artificial Intelligence (NIST Special Publication 1270, 2022). DOI: https://doi.org/10.6028/NIST.SP.1270
- Tambiama Madiega and Hendrik Mildebrath, Regulating Facial Recognition in the EU (European Parliamentary Research Service 2021) https://www.europarl.europa.eu/RegData/etudes/IDAN/2021/698021/EPRS_IDA(2021)698021_EN.pdf
- Theodore Christakis, Mathias Becuywe and AI-Regulation Team, Facial Recognition in the Draft European AI Regulation: Final Report on the High-Level Workshop Held on April 26, 2021 (2021) https://ai-regulation.com/wp-content/uploads/2021/05/Final-Report-26-04.pdf
- Theodore Christakis, Mathias Becuywe and AI-Regulation Team, Facial Recognition in the Draft European AI Regulation: Final Report on the High-Level Workshop Held on April 26, 2021 (AI-Regulation.com 2021) https://ai-regulation.com/facial-recognition-in-the-draft-european-ai-regulation-final-report-on-the-high-level-workshop-held-on-april-26-2021/
- TIPIK Legal, Report on the Implementation of Specific Provisions of Regulation (EU) 2016/679 [Final report] (European Commission Directorate General for Justice and Consumers Unit C.3 Data Protection 2021) https://www.dataguidance.com/sites/default/files/1609930170392.pdf
- UK National Cyber Security Centre, Biometrics: Measuring Performance (2019) https://www.ncsc.gov.uk/collection/biometrics/measuring-performance#:~:text=A%20false%20match%20occurs%20when,a%20characteristic%20from%20another%20individual accessed 31 May 2025.
- UK Passport Service, Biometrics Enrolment Trial (May 2005) 299.
- World Bank, Practitioner’s Guide: Biometric Data, Identification for Development (ID4D) https://id4d.worldbank.org/guide/biometric-data
- Conferences
- A Kartali, M Roglic, M Barjaktarovic, M Duric-Jovicic and M M Jankovic, ‘Real-time Algorithms for Facial Emotion Recognition: A Comparison of Different Approaches’ (2018) 14th Symposium on Neural Networks and Applications (NEUREL) 1. DOI: https://doi.org/10.1109/NEUREL.2018.8587011
- AS Bergman and others, ‘Representation in AI Evaluations’ in Proceedings of the 2023 ACM Conference on Fairness, Accountability, and Transparency (2023) 519 https://dl.acm.org/doi/fullHtml/10.1145/3593013.3594019 accessed 1 June 2025. DOI: https://doi.org/10.1145/3593013.3594019
- Daniel Florez Mendez and others, ‘Facial Recognition System for Security Access Control’ (2021) 11842 Proceedings of SPIE: Applications of Digital Image Processing XLIV 1184217. DOI: https://doi.org/10.1117/12.2594150
- E Bondi and others, ‘Envisioning Communities: A Participatory Approach Towards AI for Social Good’ (2021) Proceedings of the 2021 AAAI/ACM Conference on AI, Ethics, and Society 425 https://doi.org/10.1145/3461702.3462612 DOI: https://doi.org/10.1145/3461702.3462612
- G Udovičić, J Ðerek, M Russo and M Sikora, ‘Wearable Emotion Recognition System Based on GSR and PPG Signals’ in Proceedings of the 2nd International Workshop on Multimedia for Personal Health and Health Care (MMHealth '17) (Association for Computing Machinery, New York, NY, USA, 2017) 53. DOI: https://doi.org/10.1145/3132635.3132641
- Kanubhai K Patel, Jignesh J Patoliya and Miral M Desai, ‘IoT Based Smart Health Monitoring System with Patient Identification Using Face Recognition’ in Proceedings of the International Conference on Innovative Computing & Communication (ICICC, 2021). DOI: https://doi.org/10.2139/ssrn.3879620
- M Sloane and others, ‘Participation Is Not a Design Fix for Machine Learning’ (2022) Proceedings of the 2nd ACM Conference on Equity and Access in Algorithms, Mechanisms, and Optimization 1 https://doi.org/10.1145/3551624.3555285 DOI: https://doi.org/10.1145/3551624.3555285
- P Tuyls, E Verbitskiy, T Ignatenko, D Schobben and T Akkermans, Privacy Protected Biometric Templates: Acoustic Ear Identification (paper submitted at SPIE 2004) http://www.sps.ele.tue.nl/members/T.Ignatenko/papers/SPIE2004.pdf accessed 31 May 2025. DOI: https://doi.org/10.1117/12.541882
- Speech Technology Center, Voice Biometrics: Exciting Capabilities of a New Biometric Modality (presentation at Rise and Hide Conference, Brussels, 9–10 December 2010) slides 2, 4 and 14 http://www.riseproject.eu/_fileupload/RISE%20Conference/Presentations/Alexey%20Khitrov.pdf accessed 31 May 2025.
- Wang Y-F, Chang EY and Cheng KP, ‘A Video Analysis Framework for Soft Biometry Security Surveillance’ in Proceedings of the Third ACM International Workshop on Video Surveillance & Sensor Networks (2005) 71 https://doi.org/10.1145/1099396.1099412 accessed 31 May 2025. DOI: https://doi.org/10.1145/1099396.1099412
- Y Zhou and A Kumar, ‘Contactless Palm Vein Identification Using Multiple Representations’ (presentation and paper, IEEE Fourth International Conference on Biometrics: Theory, Applications and Systems (BTAS 2010), Washington DC, 27–29 September 2010) 6. DOI: https://doi.org/10.1109/BTAS.2010.5634470
- Case Law
- Bridges v Chief Constable of South Wales Police [2019] EWHC 2341 (Admin) https://www.judiciary.uk/wp-content/uploads/2019/09/bridges-swp-judgment-Final03-09-19-1.pdf accessed 31 May 2025.
- Dimitrov-Kazakov v Bulgaria (Application No 11379/03, ECtHR, 2018) https://hudoc.echr.coe.int/eng?i=001-103258 accessed 31 May 2025.
- S and Marper v United Kingdom App nos 30562/04 and 30566/04 (ECtHR, 4 December 2008) https://hudoc.echr.coe.int/fre?i=001-90051
- Websites
- Arno Cuypers, ‘The Right to Explanation in the AI Act: A Right to Interpretable Models?’ (2024) CiTiP Blog, KU Leuven https://www.law.kuleuven.be/citip/blog/the-right-to-explanation-in-the-ai-act-a-right-to-interpretable-models/
- ARTICLE 19, ‘EU: AI Act Passed in Parliament Fails to Ban Harmful Biometric Technologies’ (ARTICLE 19, 13 March 2024) https://www.article19.org/resources/eu-ai-act-passed-in-parliament-fails-to-ban-harmful-biometric-technologies/
- Barak Bassman and others, ‘Facing Up to Tough Issues: Health Care Compliance Concerns with Facial Recognition Technology’ (JDSupra, 12 May 2021) https://www.jdsupra.com/legalnews/facing-up-to-tough-issues-health-care-9118586/ accessed 31 May 2025.
- C Helleputte, S Belotti and F Cieri, ‘The Italian DPA Has Its Eyes on Biometric IDs – Another Fight on Tech or a Win for Privacy?’ (Privacy World, 9 April 2024) https://www.privacyworld.blog/2024/04/the-italian-dpa-has-its-eyes-on-biometric-ids-another-fight-on-tech-or-a-win-for-privacy/
- E Moss and J Metcalf, ‘The Ethical Dilemma at the Heart of Big Tech Companies’ (Harvard Business Review, 14 November 2019) https://hbr.org/2019/11/the-ethical-dilemma-at-the-heart-of-big-tech-companies
- E Sherwin and E Baryshewa, ‘Russian Court Rejects Facial Recognition Technology Ban’ (DW News, 11 June 2019) https://www.dw.com/en/russian-court-rejects-call-to-ban-facial-recognition-technology/a-51135814
- Federal Bureau of Investigation, Statement on Brandon Mayfield Case (24 May 2004) https://archives.fbi.gov/archives/news/pressrel/press-releases/statement-on-brandon-mayfield-case
- Future of Life Institute, ‘The Act Texts’ (Future of Life Institute, 2024) https://artificialintelligenceact.eu/theact/
- Hill K, ‘Wrongfully Accused by an Algorithm’ New York Times (24 June 2020) https://www.nytimes.com/2020/06/24/technology/facial-recognition-arrest.html accessed 31 May 2025.
- International Organization for Standardization (ISO), ISO/IEC 2382-37:2022 – Information Technology – Vocabulary – Part 37: Biometrics (2022–23) https://www.iso.org/standard/73514.html accessed 31 May 2025.
- Johannes Walter, ‘Human Oversight Done Right: The AI Act Should Use Humans to Monitor AI Only When Effective’ (2023) ZEW Policy Briefs 02/2023, ZEW – Leibniz Centre for European Economic Research https://www.zew.de/en/publications/human-oversight-done-right-the-ai-act-should-use-humans-to-monitor-ai-only-when-effective-1?utm_source=chatgpt.com#publication532409
- Laura Caroli, ‘Will the EU AI Act Work? Lessons Learned from Past Legislative Initiatives, Future Challenges’ (International Association of Privacy Professionals, 17 April 2024) https://iapp.org/news/a/will-the-eu-ai-act-work-lessons-learned-from-past-legislative-initiatives-future-challenges
- M Borak, ‘Police in Germany Using Live Facial Recognition’ (8 May 2024) Biometric Update https://www.biometricupdate.com/202405/police-in-germany-using-live-facial-recognition accessed 31 May 2025.
- NOYB – European Center for Digital Rights, ‘Clearview AI Data Use Deemed Illegal in Austria, However No Fine Issued’ (2023) https://noyb.eu/en/clearview-ai-data-use-deemed-illegal-austria-however-no-fine-issued accessed 31 May 2025.
- Office of Biometric Identity Management, Biometrics (US Department of Homeland Security) https://www.dhs.gov/biometrics accessed 31 May 2025.
- Oxford Reference, ‘Socio-technical System’ https://www.oxfordreference.com/display/10.1093/oi/authority.20110803100515814 accessed 1 June 2025.
- Phillip Hacker, ‘Comments on the Final Trilogue Version of the AI Act’ (European New School, 23 January 2024) https://www.europeannewschool.eu/images/chairs/hacker/Comments%20on%20the%20AI%20Act.pdf DOI: https://doi.org/10.2139/ssrn.4757603
- Simona Demkova, ‘The AI Act’s Right to Explanation: A Plea for an Integrated Remedy’ (2024) MediaLaws https://www.medialaws.eu/the-ai-acts-right-to-explanation-a-plea-for-an-integrated-remedy/ DOI: https://doi.org/10.2139/ssrn.5010892
- Vocabulary.com, ‘Vulnerability’ https://www.vocabulary.com/dictionary/vulnerability accessed 31 May 2025.
References
Books
Els J Kindt, Privacy and Data Protection Issues of Biometric Applications: A Comparative Legal Analysis (Springer 2013) 369. DOI: https://doi.org/10.1007/978-94-007-7522-0
J Breebaart, B Yang, I Buhan-Dulman and C Busch, ‘Biometric Template Protection’ (2009) 301. DOI: https://doi.org/10.1007/s11623-009-0089-0
P Hacker and J-H Passoth, ‘Varieties of AI Explanations under the Law. From the GDPR to the AIA, and Beyond’ in A Holzinger, R Goebel, R Fong, T Moon, K-R Müller and W Samek (eds), xxAI - Beyond Explainable AI, vol 13200 (Springer 2022) 343 https://doi.org/10.1007/978-3-031-04083-2_17 DOI: https://doi.org/10.1007/978-3-031-04083-2_17
P Hacker, ‘The Ambivalence of Algorithms: Gauging the Legitimacy of Personalized Law’ in M Bakhoum, B Conde Gallego, M-O Mackenrodt and G Surblytė-Namavičienė (eds), Personal Data in Competition, Consumer Protection and Intellectual Property Law (Vol 28, Springer 2018) 85 https://doi.org/10.1007/978-3-662-57646-5_5 DOI: https://doi.org/10.1007/978-3-662-57646-5_5
W Boron and E Boulpaep, Medical Physiology (Elsevier 2008).
Journal Articles
‘‘Use of Facial Recognition Technology for Medical Purposes: Balancing Privacy with Innovation’ (2016) 43(4) Pepperdine Law Review 1017, 1022.
A K Jain, A Ross and S Pankanti, ‘A Prototype Hand Geometry-based Verification System’, in Proceedings of the Second International Conference on Audio- and Video-Based Biometric Person Authentication (AVBPA) (Washington DC, USA, 1999); Joint Research Centre (JRC), Biometrics at the Frontiers (2005) 62.
Andrea Rosales and Mireia Fernández-Ardèvol, ‘Ageism in the Era of Digital Platforms’ (2020) Convergence https://journals.sagepub.com/doi/full/10.1177/1354856520930905. DOI: https://doi.org/10.1177/1354856520962670
Ayanna Howard and Charles Isbell, ‘Diversity in AI: The Invisible Men and Women’ (21 September 2020) MIT Sloan Management Review https://sloanreview.mit.edu/article/diversity-in-ai-the-invisible-men-and-women/
Bashirat Bukola, ‘Artificial Intelligence and the Right to be Forgotten’ (2024) 5(8) International Journal of Research Publication and Reviews https://doi.org/10.55248/gengpi.5.0824.2310 DOI: https://doi.org/10.55248/gengpi.5.0824.2310
Byoungjun Jeon and others, ‘A Facial Recognition Mobile App for Patient Safety and Biometric Identification: Design, Development, and Validation’ (2019) 7(4) JMIR mHealth and uHealth 1. DOI: https://doi.org/10.2196/11472
C A Jasserand, ‘Avoiding Terminological Confusion between the Notions of “Biometrics” and “Biometric Data”: An Investigation into the Meanings of the Terms from a European Data Protection and a Scientific Perspective’ (2015) 6(1) International Data Privacy Law. DOI: https://doi.org/10.1093/idpl/ipv020
C Fontes, E Hohma, CC Corrigan and C Lütge, ‘AI-powered Public Surveillance Systems: Why We (Might) Need Them and How We Want Them’ (2022) 71 Technology in Society 102137 https://doi.org/10.1016/j.techsoc.2022.102137 DOI: https://doi.org/10.1016/j.techsoc.2022.102137
Clive Norris, ‘From Personal to Digital: CCTV, the Panopticon, and the Technological Mediation of Suspicion and Social Control’ in David Lyon (ed), Surveillance as Social Sorting (Routledge 2002) 249–281 https://doi.org/10.4324/9780203994887 accessed 31 May 2025. DOI: https://doi.org/10.4324/9780203994887
David Lyon, ‘Surveillance’ (2022) 11(4) Internet Policy Review https://doi.org/10.14763/2022.4.1673 accessed 31 May 2025. DOI: https://doi.org/10.14763/2022.4.1673
Dian Hong and others, ‘Genetic Syndromes Screening by Facial Recognition Technology: VGG-16 Screening Model Construction and Evaluation’ (2021) 16 Orphanet Journal of Rare Diseases 1. DOI: https://doi.org/10.1186/s13023-021-01979-y
E Kindt, ‘Having Yes, Using No? About the New Legal Regime for Biometric Data’ (2018) 34Computer Law & Security Review 523. DOI: https://doi.org/10.1016/j.clsr.2017.11.004
Erik Snijder, Het biometrisch paspoort in Nederland: crash of zachte landing (2010) 70–72.
Esefan Ortiz, Kevin W Bowyer and Patrick J Flynn, ‘A Linear Regression Analysis of the Effects of Age Related Pupil Dilation Change in Iris Biometrics’ (2013) https://www3.nd.edu/~kwb/Ortiz_Bowyer_Flynn_BTAS_2013.pdf accessed 1 June 2025. DOI: https://doi.org/10.1109/BTAS.2013.6712687
Faslul Haq, Fathima Nasu Sahana and Nadeeka Dissanayake, ‘Navigating the Ethical and Technological Landscape: The Future Trajectory of Facial Recognition Technology’ (2024) 3 International Journal of Agrobiotechnology and Veterinary Medicine https://sciencebox.uz/index.php/tibbiyot/article/view/9948/9083
G Gárdonyi, ‘Állóképes Arckép Azonosítás Magyarországon [Still Image Face Recognition in Hungary]’ (2020) 68(3) Belügyi Szemle 22,https://doi.org/10.38146/BSZ.SPEC.2020.3.2 DOI: https://doi.org/10.38146/BSZ.SPEC.2020.3.2
G Gültekin-Várkonyi, ‘Navigating Data Governance Risks: Facial Recognition in Law Enforcement under EU Legislation’ (2024) 13(3) Internet Policy Review https://doi.org/10.14763/2024.3.1798 DOI: https://doi.org/10.14763/2024.3.1798
Graham Greenleaf, ‘India’s National ID System: Danger Grows in a Privacy Vacuum’ (2010) Computer Law & Security Review 26(5), 479–491. DOI: https://doi.org/10.1016/j.clsr.2010.07.009
Gültekin-Várkonyi G, ‘Consent Mechanism in the Life with Social Robots’ (2019) 31(1) European Review of Public Law.
Hacker P, ‘AI Regulation in Europe: From the AI Act to Future Regulatory Challenges’ (2023) https://doi.org/10.48550/arXiv.2310.04072 accessed 31 May 2025.
HUMABIO Project, Human Monitoring and Authentication Using Biodynamic Indicators and Behavioral Analysis (EU Sixth Framework Programme, 2006–2008) http://cordis.europa.eu/fetch?CALLER=IST_UNIFIEDSRCH&ACTION=D&DOC=6&CAT=PROJ&QUERY=011e5a6ef5cd:570d:08b193fe&RCN=78373 accessed 31 May 2025.
I Fábián and GG Gulyás, ‘A Comparative Study on the Privacy Risks of Face Recognition Libraries’ (2021) 25(2) Acta Cybernetica 233 https://cyber.bibl.u-szeged.hu/index.php/actcybern/article/view/4198 accessed 1 June 2025. DOI: https://doi.org/10.14232/actacyb.289662
J R Matey et al, ‘Iris on the Move: Acquisition of Images for Iris Recognition in Less Constrained Environments’ (2006) Proceedings of the IEEE 1936–1947 http://ieeexplore.ieee.org/Xplore/login.jsp?url=http%3A%2F%2Fieeexplore.ieee.org%2Fiel5%2F5%2F4052463%2F04052478.pdf&authDecision=-203 (‘Matey et al., Iris on the Move, 2006’).
Koops B-J, ‘The Concept of Function Creep’ (2021) 13(1) Law, Innovation and Technology 29 https://doi.org/10.1080/17579961.2021.1898299 accessed 31 May 2025. DOI: https://doi.org/10.1080/17579961.2021.1898299
L Basel-Vanagaite and others, ‘Recognition of the Cornelia de Lange Syndrome Phenotype with Facial Dysmorphology Novel Analysis’ (2016) 89(5) Clinical Genetics 557. DOI: https://doi.org/10.1111/cge.12716
L Urquhart and D Miranda, ‘Policing Faces: The Present and Future of Intelligent Facial Surveillance’ (2022) 31(2) Information & Communications Technology Law 194 https://doi.org/10.1080/13600834.2021.1994220 DOI: https://doi.org/10.1080/13600834.2021.1994220
Luke Scanlon, ‘What Meaningful Human Oversight of AI Should Look Like’ (2022) Pinsent Masons Out-Law https://www.pinsentmasons.com/out-law/analysis/what-meaningful-human-oversight-of-ai-should-look-like
M Bromba, ‘Reconstruction of Biometric Raw Data’ (2006).
N Helberger and N Diakopoulos, ‘ChatGPT and the AI Act’ (2023) 12(1) Internet Policy Review https://doi.org/10.14763/2023.1.1682 DOI: https://doi.org/10.14763/2023.1.1682
Nathalie A Smuha and others, ‘How the EU Can Achieve Legally Trustworthy AI: A Response to the European Commission’s Proposal for an Artificial Intelligence Act’ (2021) Social Science Research Network https://doi.org/10.2139/ssrn.3899991 DOI: https://doi.org/10.2139/ssrn.3899991
P Lewinski, J Trzaskowski and J Luzak, ‘Face and Emotion Recognition on Commercial Property under EU Data Protection Law’ (2016) 33(9) Psychology & Marketing 729. DOI: https://doi.org/10.1002/mar.20913
R Delikat, The Regulatory Gap Between the Law and the Use of Real-Time Facial Recognition Technology by Police in the European Union (Master’s thesis, Tilburg University 2021) 61 https://arno.uvt.nl/show.cgi?fid=155401 accessed 1 June 2025.
R W Picard, ‘Affective Computing: Challenges’ (2003) 59(1) International Journal of Human-Computer Studies 55. DOI: https://doi.org/10.1016/S1071-5819(03)00052-1
Rainer Mühlhoff and Hannah Ruschemeier, ‘Updating Purpose Limitation for AI: A Normative Approach from Law and Philosophy’ (22 January 2024) SSRN https://ssrn.com/abstract=4711621 or http://dx.doi.org/10.2139/ssrn.4711621 DOI: https://doi.org/10.2139/ssrn.4711621
Rezende IN, ‘Facial Recognition in Police Hands: Assessing the “Clearview Case” from a European Perspective’ (2020) 11(3) New Journal of European Criminal Law 375 https://doi.org/10.1177/2032284420948161 accessed 31 May 2025. DOI: https://doi.org/10.1177/2032284420948161
RP Kosilek and others, ‘Automatic Face Classification of Cushing’s Syndrome in Women – A Novel Screening Approach’ (2013) 121(9) Experimental and Clinical Endocrinology & Diabetes 561. DOI: https://doi.org/10.1055/s-0033-1349124
RSS Kramer, MO Mireku, TR Flack and others, ‘Face Morphing Attacks: Investigating Detection with Humans and Computers’ (2019) 4 Cognitive Research 28 https://doi.org/10.1186/s41235-019-0181-4 DOI: https://doi.org/10.1186/s41235-019-0181-4
S Khairnar, S Gite, K Kotecha and SD Thepade, ‘Face Liveness Detection Using Artificial Intelligence Techniques: A Systematic Literature Review and Future Directions’ (2023) 7(1) Big Data and Cognitive Computing 37 https://doi.org/10.3390/bdcc7010037 DOI: https://doi.org/10.3390/bdcc7010037
Sandra Wachter, ‘Limitations and Loopholes in the EU AI Act and AI Liability Directives: What This Means for the European Union, the United States, and Beyond’ (2024) 26(3) Yale Journal of Law & Technology https://ssrn.com/abstract=4924553 or http://dx.doi.org/10.2139/ssrn.4924553 DOI: https://doi.org/10.2139/ssrn.4924553
T Züger and H Asghari, ‘AI for the Public: How Public Interest Theory Shifts the Discourse on AI’ (2023) 38 AI & Society 815 https://doi.org/10.1007/s00146-022-01480-5 DOI: https://doi.org/10.1007/s00146-022-01480-5
Tim Miller, ‘Explanation in Artificial Intelligence: Insights from the Social Sciences’ (2019) 267 Artificial Intelligence 1 https://www.sciencedirect.com/science/article/pii/S0004370218305988 DOI: https://doi.org/10.1016/j.artint.2018.07.007
U Park, Y Tong and AK Jain, ‘Face Recognition with Temporal Invariance: A 3D Aging Model’ (2010) IEEE Transactions on Pattern Analysis and Machine Intelligence 32(5), 947 https://ieeexplore.ieee.org/document/5413023 accessed 1 June 2025. DOI: https://doi.org/10.1109/TPAMI.2010.14
VL Raposo, ‘(Do Not) Remember My Face: Uses of Facial Recognition Technology in Light of the General Data Protection Regulation’ (2023) 32(1) Information & Communications Technology Law 45 https://doi.org/10.1080/13600834.2022.2054076 accessed 1 June 2025. DOI: https://doi.org/10.1080/13600834.2022.2054076
Yichao Ma, Zengxi Huang, Xiaoming Wang and Kai Huang, ‘An Overview of Multimodal Biometrics Using the Face and Ear’ (2020) Mathematical Problems in Engineering https://doi.org/10.1155/2020/6802905 DOI: https://doi.org/10.1155/2020/6802905
Yuncong Yang and others, ‘From Machine Learning to Machine Unlearning: Complying with GDPR's Right to be Forgotten while Maintaining Business Value of Predictive Models’ (2024) arXiv preprint arXiv:2411.17126 https://arxiv.org/pdf/2411.17126
International Legal Documents
Article 29 Data Protection Working Party, Opinion 3/2012 on developments in biometric technologies (WP 193, 27 April 2012).
Article 29 Data Protection Working Party, Working Document on Biometrics, WP 80, 1 August 2003, 11 (‘WP 29 Working Document on Biometrics 2003 (WP80)’); Article 29 Data Protection Working Party, Opinion 3/2012 on developments in biometric technologies, WP 193, 27 April 2012.
Charter of Fundamental Rights of the European Union [2012] OJ C326/391.
Commission Decision of 28 June 2006 laying down the technical specifications on the standards for security features and biometrics in passports and travel documents issued by Member States.
Consultative Committee of the Convention 108, Guidelines on Facial Recognition (Guideline No T-PD(2020)03rev4, Council of Europe 2021) https://edoc.coe.int/en/artificial-intelligence/9753-guidelines-on-facial-recognition.html accessed 31 May 2025.
Convention for the Protection of Human Rights and Fundamental Freedoms, Protocol No 12 (opened for signature 4 November 2000, entered into force 1 April 2005).
Convention for the Protection of Human Rights and Fundamental Freedoms (European Convention on Human Rights, as amended) (ECHR).
Council of Europe, Convention for the Protection of Individuals with regard to Automatic Processing of Personal Data (Modernised Convention 108, 2018).
EDPS (European Data Protection Supervisor), Opinion on the Proposal for a Council Decision on the establishment, operation and use of the second-generation Schengen Information System (SIS II) (2005) 19.
European Commission, Convergence: Creating the Future Commission. President Jacques Santer Announces 200,000 ECU European IT Prize Winners (25 November 1997) http://cordis.europa.eu/esprit/src/eitcp4en.htm accessed 31 May 2025.
European Commission, Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act), COM/2021/206 final https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52021PC0206
European Commission, Shaping Europe’s Digital Future (February 2020) https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52020DC0067
European Commission, White Paper on Artificial Intelligence – A European Approach to Excellence and Trust, COM(2020) 65 final https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52020DC0065
European Data Protection Board and European Data Protection Supervisor, Joint Opinion 5/2021 on the Proposal for a Regulation of the European Parliament and of the Council Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) (18 June 2021) https://www.edpb.europa.eu/system/files/2021-06/edpb-edps_joint_opinion_ai_regulation_en.pdf
European Data Protection Board, ‘Facial Recognition: Italian SA Fines Clearview AI EUR 20 Million’ (2022) https://www.edpb.europa.eu/news/national-news/2022/facial-recognition-italian-sa-fines-clearview-ai-eur-20-million_en accessed 31 May 2025.
European Data Protection Board, Guidelines 05/2020 on Consent under Regulation 2016/679 (May 2020) 7–32 https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_202005_consent_en.pdf accessed 31 May 2025.
European Data Protection Board, Guidelines 3/2019 on Processing of Personal Data Through Video Devices (January 2020) 5–23 https://www.edpb.europa.eu/sites/default/files/files/file1/edpb_guidelines_201903_video_devices.pdf accessed 31 May 2025.
European Data Protection Board, Swedish DPA: Police Unlawfully Used Facial Recognition App (Press release, 2021) https://www.edpb.europa.eu/news/national-news/2021/swedish-dpa-police-unlawfully-used-facial-recognition-app_en accessed 31 May 2025.
European Parliament, Amendments Adopted by the European Parliament on 14 June 2023 on the Proposal for a Regulation of the European Parliament and of the Council on Laying Down Harmonised Rules on Artificial Intelligence (Artificial Intelligence Act) and Amending Certain Union Legislative Acts (2023) https://www.europarl.europa.eu/doceo/document/TA-9-2023-0236_EN.html
European Union Agency for Fundamental Rights, Handbook on European Data Protection Law: 2018 Edition (FRA, 2018) https://fra.europa.eu/sites/default/files/fra_uploads/fra-coe-edps-2018-handbook-data-protection_en.pdf accessed 31 May 2025.
International Covenant on Civil and Political Rights (adopted 16 December 1966, entered into force 23 March 1976) 999 UNTS 171 (ICCPR).
Regulation (EC) No 2252/2004 of 13 December 2004 on Standards for Security Features and Biometrics in Passports and Travel Documents Issued by Member States [2004] OJ L385/1.
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation) https://eur-lex.europa.eu/eli/reg/2016/679/oj accessed 31 May 2025.
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence and amending Regulations (EC) No 300/2008, (EU) No 167/2013, (EU) No 168/2013, (EU) 2018/858, (EU) 2018/1139 and (EU) 2019/2144 and Directives 2014/90/EU, (EU) 2016/797 and (EU) 2020/1828 (Artificial Intelligence Act) https://eur-lex.europa.eu/legal-content/EN/TXT/PDF/?uri=OJ:L_202401689 accessed 31 May 2025.
Laws
Act CCXXII of 2015 (Hungary) https://njt.hu/jogszabaly/en/2015-222-00-00
Reports
van der Wolk and Morrison & Foerster, ‘The (Im)Possibilities of Scientific Research Under the GDPR’ (Cybersecurity Law Report, 2020) 3–4 https://assets.contentstack.io/v3/assets/blt5775cc69c999c255/bltbb2bb3df1bea55fe/200722-scientific-research-gdpr.pdf accessed 31 May 2025.
Amba Kak, Regulating Biometrics: Global Approaches and Open Questions (AI Now Institute 2020) https://ainowinstitute.org/publication/regulating-biometrics-global-approaches-and-open-questions
American Society for Testing and Materials, Standard Guide for Capturing Facial Images for Use with Facial Recognition Systems (ASTM International, 2023) Vol 14.02, No E3115-17 https://doi.org/10.1520/E3115-17 accessed 1 June 2025. DOI: https://doi.org/10.1520/E3115-17
Amnesty International, ‘EU: Artificial Intelligence Rulebook Fails to Stop Proliferation of Abusive Technologies’ (Amnesty International, 14 March 2024) https://www.amnesty.org/en/latest/news/2024/03/eu-artificial-intelligence-rulebook-fails-to-stop-proliferation-of-abusive-technologies/
Andy Ashbourn, Social Implications of Wide Scale Implementation of Biometrics (2005) 6.
Banda J, ‘Inherently Identifiable: Is It Possible to Anonymize Health and Genetic Data?’ (IAPP, 13 November 2019) https://iapp.org/news/a/inherently-identifiable-is-it-possible-to-anonymize-health-and-genetic-data accessed 31 May 2025.
E Garvie, A Bedoya and J Frankle, The Perpetual Line-Up: Unregulated Police Face Recognition in America [Report] (Center on Privacy & Technology at Georgetown Law 2016) https://www.perpetuallineup.org/risk-framework
E Jakubowska, Remote Biometric Identification: A Technical & Legal Guide [Guidance] (European Digital Rights 2023) https://edri.org/our-work/remote-biometric-identification-a-technical-legal-guide/
E Moss and others, Assembling Accountability: Algorithmic Impact Assessment for the Public Interest (Data & Society 2021) https://datasociety.net/library/assembling-accountability-algorithmic-impact-assessment-for-the-public-interest/ DOI: https://doi.org/10.2139/ssrn.3877437
Europol, ChatGPT: The Impact of Large Language Models on Law Enforcement (Tech Watch Flash) (Europol Innovation Lab, 2023) https://www.europol.europa.eu/publications-events/publications/chatgpt-impact-of-large-language-models-law-enforcement accessed 31 May 2025.
Gary Roethenbaugh, cited in A Cavoukian, Privacy and Biometrics (Information and Privacy Commissioner, Ontario 1999) 11 http://www.ipc.on.ca/images/Resources/pri-biom.pdf accessed 31 May 2025.
Joseph Pato and Lynette Millett (eds), Biometric Recognition: Challenges and Opportunities (National Research Council, September 2010) 3 (‘NRC, Biometric Recognition, 2010’).
Joy Buolamwini and Timnit Gebru, ‘Gender Shades: Intersectional Accuracy Disparities in Commercial Gender Classification’ (Conference on Fairness, Accountability, and Transparency, 2018) https://www.media.mit.edu/publications/gender-shades-intersectional-accuracy-disparities-in-commercial-gender-classification/ accessed 1 June 2025.
M Gasson, M Meints and K Warwick (eds), D.3.2: A Study on PKI and Biometrics (FIDIS, Frankfurt, July 2005) 82–86.
Michael Gasson, Martin Meints and Kevin Warwick (eds), D3.2 A Study on PKI and Biometrics, FIDIS (2005) http://www.fidis.net/resources/fidis-deliverables
Ministerie van Binnenlandse Zaken en Koninkrijksrelaties, Kamerstuk 25 764, nr. 27b1 (2005) 83 https://zoek.officielebekendmakingen.nl/kst-25764-27-b1.pdf accessed 1 June 2025.
National Institute of Standards and Technology (NIST), ‘NIST Evaluates Face Recognition Software’s Accuracy for Flight Boarding’ (17 July 2021) https://www.nist.gov/news-events/news/2021/07/nist-evaluates-face-recognition-softwares-accuracy-flight-boarding accessed 1 June 2025.
National Institute of Standards and Technology (NIST), ‘NIST Study Evaluates Effects of Race, Age, Sex on Face Recognition Software’ (19 December 2019) https://www.nist.gov/news-events/news/2019/12/nist-study-evaluates-effects-race-age-sex-face-recognition-software
National Science and Technology Council (NSTC), Palm Print Recognition (2006). http://www.biometrics.gov/documents/palmprintrec.pdf.
Organization for Economic Co-operation and Development, Biometric-based Technologies (OECD, DSTI/ICCP/REG(2003)2/FINAL, 30 June 2004, cancelling and replacing the same document of 28 April 2004) 11 (‘OECD, Biometric-based technologies, 2004’).
Reva Schwartz and others, Towards a Standard for Identifying and Managing Bias in Artificial Intelligence (NIST Special Publication 1270, 2022). DOI: https://doi.org/10.6028/NIST.SP.1270
Tambiama Madiega and Hendrik Mildebrath, Regulating Facial Recognition in the EU (European Parliamentary Research Service 2021) https://www.europarl.europa.eu/RegData/etudes/IDAN/2021/698021/EPRS_IDA(2021)698021_EN.pdf
Theodore Christakis, Mathias Becuywe and AI-Regulation Team, Facial Recognition in the Draft European AI Regulation: Final Report on the High-Level Workshop Held on April 26, 2021 (2021) https://ai-regulation.com/wp-content/uploads/2021/05/Final-Report-26-04.pdf
Theodore Christakis, Mathias Becuywe and AI-Regulation Team, Facial Recognition in the Draft European AI Regulation: Final Report on the High-Level Workshop Held on April 26, 2021 (AI-Regulation.com 2021) https://ai-regulation.com/facial-recognition-in-the-draft-european-ai-regulation-final-report-on-the-high-level-workshop-held-on-april-26-2021/
TIPIK Legal, Report on the Implementation of Specific Provisions of Regulation (EU) 2016/679 [Final report] (European Commission Directorate General for Justice and Consumers Unit C.3 Data Protection 2021) https://www.dataguidance.com/sites/default/files/1609930170392.pdf
UK National Cyber Security Centre, Biometrics: Measuring Performance (2019) https://www.ncsc.gov.uk/collection/biometrics/measuring-performance#:~:text=A%20false%20match%20occurs%20when,a%20characteristic%20from%20another%20individual accessed 31 May 2025.
UK Passport Service, Biometrics Enrolment Trial (May 2005) 299.
World Bank, Practitioner’s Guide: Biometric Data, Identification for Development (ID4D) https://id4d.worldbank.org/guide/biometric-data
Conferences
A Kartali, M Roglic, M Barjaktarovic, M Duric-Jovicic and M M Jankovic, ‘Real-time Algorithms for Facial Emotion Recognition: A Comparison of Different Approaches’ (2018) 14th Symposium on Neural Networks and Applications (NEUREL) 1. DOI: https://doi.org/10.1109/NEUREL.2018.8587011
AS Bergman and others, ‘Representation in AI Evaluations’ in Proceedings of the 2023 ACM Conference on Fairness, Accountability, and Transparency (2023) 519 https://dl.acm.org/doi/fullHtml/10.1145/3593013.3594019 accessed 1 June 2025. DOI: https://doi.org/10.1145/3593013.3594019
Daniel Florez Mendez and others, ‘Facial Recognition System for Security Access Control’ (2021) 11842 Proceedings of SPIE: Applications of Digital Image Processing XLIV 1184217. DOI: https://doi.org/10.1117/12.2594150
E Bondi and others, ‘Envisioning Communities: A Participatory Approach Towards AI for Social Good’ (2021) Proceedings of the 2021 AAAI/ACM Conference on AI, Ethics, and Society 425 https://doi.org/10.1145/3461702.3462612 DOI: https://doi.org/10.1145/3461702.3462612
G Udovičić, J Ðerek, M Russo and M Sikora, ‘Wearable Emotion Recognition System Based on GSR and PPG Signals’ in Proceedings of the 2nd International Workshop on Multimedia for Personal Health and Health Care (MMHealth '17) (Association for Computing Machinery, New York, NY, USA, 2017) 53. DOI: https://doi.org/10.1145/3132635.3132641
Kanubhai K Patel, Jignesh J Patoliya and Miral M Desai, ‘IoT Based Smart Health Monitoring System with Patient Identification Using Face Recognition’ in Proceedings of the International Conference on Innovative Computing & Communication (ICICC, 2021). DOI: https://doi.org/10.2139/ssrn.3879620
M Sloane and others, ‘Participation Is Not a Design Fix for Machine Learning’ (2022) Proceedings of the 2nd ACM Conference on Equity and Access in Algorithms, Mechanisms, and Optimization 1 https://doi.org/10.1145/3551624.3555285 DOI: https://doi.org/10.1145/3551624.3555285
P Tuyls, E Verbitskiy, T Ignatenko, D Schobben and T Akkermans, Privacy Protected Biometric Templates: Acoustic Ear Identification (paper submitted at SPIE 2004) http://www.sps.ele.tue.nl/members/T.Ignatenko/papers/SPIE2004.pdf accessed 31 May 2025. DOI: https://doi.org/10.1117/12.541882
Speech Technology Center, Voice Biometrics: Exciting Capabilities of a New Biometric Modality (presentation at Rise and Hide Conference, Brussels, 9–10 December 2010) slides 2, 4 and 14 http://www.riseproject.eu/_fileupload/RISE%20Conference/Presentations/Alexey%20Khitrov.pdf accessed 31 May 2025.
Wang Y-F, Chang EY and Cheng KP, ‘A Video Analysis Framework for Soft Biometry Security Surveillance’ in Proceedings of the Third ACM International Workshop on Video Surveillance & Sensor Networks (2005) 71 https://doi.org/10.1145/1099396.1099412 accessed 31 May 2025. DOI: https://doi.org/10.1145/1099396.1099412
Y Zhou and A Kumar, ‘Contactless Palm Vein Identification Using Multiple Representations’ (presentation and paper, IEEE Fourth International Conference on Biometrics: Theory, Applications and Systems (BTAS 2010), Washington DC, 27–29 September 2010) 6. DOI: https://doi.org/10.1109/BTAS.2010.5634470
Case Law
Bridges v Chief Constable of South Wales Police [2019] EWHC 2341 (Admin) https://www.judiciary.uk/wp-content/uploads/2019/09/bridges-swp-judgment-Final03-09-19-1.pdf accessed 31 May 2025.
Dimitrov-Kazakov v Bulgaria (Application No 11379/03, ECtHR, 2018) https://hudoc.echr.coe.int/eng?i=001-103258 accessed 31 May 2025.
S and Marper v United Kingdom App nos 30562/04 and 30566/04 (ECtHR, 4 December 2008) https://hudoc.echr.coe.int/fre?i=001-90051
Websites
Arno Cuypers, ‘The Right to Explanation in the AI Act: A Right to Interpretable Models?’ (2024) CiTiP Blog, KU Leuven https://www.law.kuleuven.be/citip/blog/the-right-to-explanation-in-the-ai-act-a-right-to-interpretable-models/
ARTICLE 19, ‘EU: AI Act Passed in Parliament Fails to Ban Harmful Biometric Technologies’ (ARTICLE 19, 13 March 2024) https://www.article19.org/resources/eu-ai-act-passed-in-parliament-fails-to-ban-harmful-biometric-technologies/
Barak Bassman and others, ‘Facing Up to Tough Issues: Health Care Compliance Concerns with Facial Recognition Technology’ (JDSupra, 12 May 2021) https://www.jdsupra.com/legalnews/facing-up-to-tough-issues-health-care-9118586/ accessed 31 May 2025.
C Helleputte, S Belotti and F Cieri, ‘The Italian DPA Has Its Eyes on Biometric IDs – Another Fight on Tech or a Win for Privacy?’ (Privacy World, 9 April 2024) https://www.privacyworld.blog/2024/04/the-italian-dpa-has-its-eyes-on-biometric-ids-another-fight-on-tech-or-a-win-for-privacy/
E Moss and J Metcalf, ‘The Ethical Dilemma at the Heart of Big Tech Companies’ (Harvard Business Review, 14 November 2019) https://hbr.org/2019/11/the-ethical-dilemma-at-the-heart-of-big-tech-companies
E Sherwin and E Baryshewa, ‘Russian Court Rejects Facial Recognition Technology Ban’ (DW News, 11 June 2019) https://www.dw.com/en/russian-court-rejects-call-to-ban-facial-recognition-technology/a-51135814
Federal Bureau of Investigation, Statement on Brandon Mayfield Case (24 May 2004) https://archives.fbi.gov/archives/news/pressrel/press-releases/statement-on-brandon-mayfield-case
Future of Life Institute, ‘The Act Texts’ (Future of Life Institute, 2024) https://artificialintelligenceact.eu/theact/
Hill K, ‘Wrongfully Accused by an Algorithm’ New York Times (24 June 2020) https://www.nytimes.com/2020/06/24/technology/facial-recognition-arrest.html accessed 31 May 2025.
International Organization for Standardization (ISO), ISO/IEC 2382-37:2022 – Information Technology – Vocabulary – Part 37: Biometrics (2022–23) https://www.iso.org/standard/73514.html accessed 31 May 2025.
Johannes Walter, ‘Human Oversight Done Right: The AI Act Should Use Humans to Monitor AI Only When Effective’ (2023) ZEW Policy Briefs 02/2023, ZEW – Leibniz Centre for European Economic Research https://www.zew.de/en/publications/human-oversight-done-right-the-ai-act-should-use-humans-to-monitor-ai-only-when-effective-1?utm_source=chatgpt.com#publication532409
Laura Caroli, ‘Will the EU AI Act Work? Lessons Learned from Past Legislative Initiatives, Future Challenges’ (International Association of Privacy Professionals, 17 April 2024) https://iapp.org/news/a/will-the-eu-ai-act-work-lessons-learned-from-past-legislative-initiatives-future-challenges
M Borak, ‘Police in Germany Using Live Facial Recognition’ (8 May 2024) Biometric Update https://www.biometricupdate.com/202405/police-in-germany-using-live-facial-recognition accessed 31 May 2025.
NOYB – European Center for Digital Rights, ‘Clearview AI Data Use Deemed Illegal in Austria, However No Fine Issued’ (2023) https://noyb.eu/en/clearview-ai-data-use-deemed-illegal-austria-however-no-fine-issued accessed 31 May 2025.
Office of Biometric Identity Management, Biometrics (US Department of Homeland Security) https://www.dhs.gov/biometrics accessed 31 May 2025.
Oxford Reference, ‘Socio-technical System’ https://www.oxfordreference.com/display/10.1093/oi/authority.20110803100515814 accessed 1 June 2025.
Phillip Hacker, ‘Comments on the Final Trilogue Version of the AI Act’ (European New School, 23 January 2024) https://www.europeannewschool.eu/images/chairs/hacker/Comments%20on%20the%20AI%20Act.pdf DOI: https://doi.org/10.2139/ssrn.4757603
Simona Demkova, ‘The AI Act’s Right to Explanation: A Plea for an Integrated Remedy’ (2024) MediaLaws https://www.medialaws.eu/the-ai-acts-right-to-explanation-a-plea-for-an-integrated-remedy/ DOI: https://doi.org/10.2139/ssrn.5010892
Vocabulary.com, ‘Vulnerability’ https://www.vocabulary.com/dictionary/vulnerability accessed 31 May 2025.