presentation biometrics itech law 2009 european conference
DESCRIPTION
Lorenz gave a presentation on the legal aspects of biometrics at the Annual European ITechLaw Conference which was held in Brussels on November 5-6, 2009. Biometrics are gaining importance to adequately secure physical access as well as access to information systems. However, the implementation of biometric technology on the European market requires that a number of legal hurdles are successfully overcome by the biometrics industry and companies planning to invest in such technology.TRANSCRIPT
![Page 1: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/1.jpg)
Lorenz
1
Brussels Bishkek Geneva
![Page 2: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/2.jpg)
2
Table of Contents
Lorenz Brussels Bishkek Geneva
I. Introduction to Biometrics
II. Privacy Protection under Regulatory Regimes
III. Other Legal IssuesA. Biometrics in the WorkplaceB. E-commerceC. EvidenceD. Standardization
IV. Concluding Remarks and Questions
![Page 3: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/3.jpg)
I. INTRODUCTION TO BIOMETRICS
Brussels Bishkek Geneva 3
Lorenz
![Page 4: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/4.jpg)
WHAT IS ‘BIOMETRICS’?
1. Characteristic: The measurement of (i) psychological or (ii)
behavioural characteristics of an individual, for use in proving
their identity.
2. Process: The automated method of recognizing an individual
based on measurable characteristics.
Brussels Bishkek Geneva 4
Lorenz
![Page 5: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/5.jpg)
Brussels Bishkek Geneva 5
Lorenz
1. Sensor
2. Biometric Template
3. Data storage Components
4. Matching Algorithm
5. Decision Process
How does a biometric system work?
![Page 6: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/6.jpg)
Practical uses of biometric technology
1) Logical access – information and assets
2) Physical Access – facility or location
Brussels Bishkek Geneva 6
Lorenz
![Page 7: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/7.jpg)
Verification Versus Identification
Verification systems compares sample to previously submitted templates.
1 = 1
Identification systems try to determine who the individual is by comparing to a closed set or open
set of data.
1 = multiple
Brussels Bishkek Geneva 7
Lorenz
![Page 8: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/8.jpg)
Characteristics Biometric Elements:
- Universality- Uniqueness- Permanence- Accessibility and ability to be quantified
Lorenz
![Page 9: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/9.jpg)
Common Characteristics of Biometric Recognition Systems
-System Performance (error rates)-User Tolerance-Robustness-Interface Ability
Lorenz
![Page 10: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/10.jpg)
Fingerprint recognition
Brussels Bishkek Geneva 10
Lorenz
http://www.biometricsinfo.org/images/finger3.jpg
![Page 11: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/11.jpg)
Hand and Finger Geometry
Brussels Bishkek Geneva 11
Lorenz
http://www.theage.com.au/news/national/schools-to-fingerprint-students-for-security/2007/09/01/1188067438565.htmlhttp://www.sandiacontrolsystems.com/img/HGU.jpg
![Page 12: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/12.jpg)
Brussels Bishkek Geneva 12
Face Recognition
Lorenz
http://news.bbc.co.uk/2/shared/spl/hi/guides/456900/456993/html/nn2page1.stm
![Page 13: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/13.jpg)
Speaker Recognition
Brussels Bishkek Geneva 13
Lorenz
http://www.acm.org/crossroads/xrds3-3/gfx/sound.jpg
![Page 14: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/14.jpg)
Brussels Bishkek Geneva 14
Iris Recognition
Lorenz
http://www.cytrap.eu/files/ReguStand/2007/image/2007-11-28_iris-recognition-biometric-passport.jpg
![Page 15: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/15.jpg)
Brussels Bishkek Geneva 15
Iris Recognition
Lorenz
http://www.cl.cam.ac.uk/~jgd1000/iriscollage.jpg
http://www.cytrap.eu/files/ReguStand/2007/image/2007-11-28_iris-recognition-biometric-passport.jpg
![Page 16: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/16.jpg)
Brussels Bishkek Geneva 16
Lorenz
Biometric Passports
http://www.scienceprog.com/wp-content/uploads/RFID/e-passport.JPG
![Page 17: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/17.jpg)
Brussels Bishkek Geneva 17
• Dynamic signature
• Keystroke dynamics
• Circulatory recognition
• Gait/body recognition
• Facial thermography
• DNA recognition ?• Etc.
Lorenz
Developing biometric technologies
![Page 18: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/18.jpg)
Brussels Bishkek Geneva
Government uses: • E-passports• National Security • Transportation: Airport/airline
travel• Immigration• Information Security
Private sector uses:•Hardware •Information Security•Domestic Uses•Health care•HR Purposes•Assets
18Brussels Bishkek Geneva
Lorenz
Current Uses in the Market
![Page 19: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/19.jpg)
II. BIOMETRICS AND EUROPEAN PRIVACY
Brussels Bishkek Geneva 19
Lorenz
![Page 20: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/20.jpg)
European Context
- Right to data protection - Right to privacy- Human right approach
Brussels Bishkek Geneva20
Lorenz
![Page 21: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/21.jpg)
Brussels Bishkek Geneva
21
Lorenz Brussels Bishkek Geneva
Biometrics and Human Rights
![Page 22: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/22.jpg)
Generic Concerns Article 29 Working Party
- Special sensitivity biometric data : - behavioural and physiological characteristics of an individual- Unique identification
- Potential re-use (both private and public sector actors)- Potential desensitization
Brussels Bishkek Geneva22
Lorenz
![Page 23: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/23.jpg)
Brussels Bishkek Geneva
Purpose and Proportionality
- Impact on legitimacy of biometric process used in a specific context (e.g. Storage of reference information; raw data may contain unnecessary information)
- Affected population (in terms of quantity and quality)- Public sector uses v. Private sector uses
Brussels Bishkek Geneva23
Lorenz
![Page 24: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/24.jpg)
Brussels Bishkek Geneva
Other Issues
• Fair collection and information• Criteria for making data processing legitimate• Prior Checking – notification requirements• Security measures• Sensitive data• Unique identifier
Brussels Bishkek Geneva24
Lorenz
![Page 25: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/25.jpg)
Interpretations by member state DPAs
Brussels Bishkek Geneva 25
Lorenz
![Page 26: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/26.jpg)
No harmonized approach (country by country) Gradually but slowly more acceptance of biometrics
technology Factors:
DPAs tend to be sceptical about storing templates in a central database
DPAs promote the use of biometric applications that do not “leave traces”
DPA are more lenient towards public sector purposes (private sector purposes typically require stronger justification)
Lorenz
![Page 27: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/27.jpg)
Potential Bottlenecks For Companies
- Biometrics technology industry- Users of biometrics technology
Brussels Bishkek Geneva27
Lorenz
![Page 28: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/28.jpg)
III. OTHER LEGAL ISSUES
A. BIOMETRICS IN THE WORKPLACE
B. E-COMMERCE AND CONTRACTS
C. POSSIBLE CONTRACTUAL ISSUES
D. EVIDENCE
E. STANDARDIZATION
Brussels Bishkek Geneva 28
Lorenz
![Page 29: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/29.jpg)
Brussels Bishkek Geneva
29
A. Biometrics in the workplace
Lorenz Brussels Bishkek Geneva
http://pagesperso-orange.fr/fingerchip/biometrics/fun/security4.gif
![Page 30: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/30.jpg)
Biometrics in the workplace (continued)
Need for employer to secure premises and IT Network (physical and logical access control)
Monitoring of employees (e.g. prevention of ‘buddy punching’)
30
Lorenz
![Page 31: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/31.jpg)
Biometrics in the workplace (continued)• Privacy Issues:
– Legitimacy of specific use of biometrics– Biometric information stored in central database or on individual
carriers (e.g. badge)?– Are some biometric data to be considered as sensitive data
(containing information on race, health,...)?
• Consultation Issues– Introduction of biometric system may have impact on the work
organisation and the privacy of employees– Involvement of employee representative bodies
Lorenz
![Page 32: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/32.jpg)
Brussels Bishkek Geneva
B. Biometrics and E-commerce
Ability to identify the purchaser?• Better than passwords
Industry is slow to embrace biometric technologyCosts• Non-portability of devices
Alternatives such as keystroke dynamics and speaker recognition could solve these issues.
Brussels Bishkek Geneva32
Lorenz
![Page 33: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/33.jpg)
Brussels Bishkek Geneva
Biometrics and E-commerce continued
Brussels Bishkek Geneva33
Lorenz
![Page 34: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/34.jpg)
Brussels Bishkek Geneva
C. Possible Contractual Issues
1. Liability2. Malfunctions and technical problems
Brussels Bishkek Geneva34
Lorenz
![Page 35: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/35.jpg)
Brussels Bishkek Geneva
D. Evidence
Brussels Bishkek Geneva35
Lorenz
http://aftermathnews.files.wordpress.com/2008/08/biometric_passport.jpg
![Page 36: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/36.jpg)
Brussels Bishkek Geneva
Brussels Bishkek Geneva36
Lorenz
Outstanding problems with biometrics as evidence:
1.Lack of harmonization
2.Advantages and disadvantages experts
3.Right to counter-expertise
4.Rights of second experts
![Page 37: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/37.jpg)
Brussels Bishkek Geneva
E. Standardization
Brussels Bishkek Geneva37
Lorenz
•National and International efforts for standardization of biometrics and biometric systems
•International Standardizing Organization in cooperation with the International Electro-technical Commission publishes standards
•Importance of interoperability of systems
![Page 38: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/38.jpg)
Brussels Bishkek Geneva
IV. CONCLUDING REMARKS AND QUESTIONS
Brussels Bishkek Geneva 38
Lorenz
![Page 39: Presentation Biometrics ITech Law 2009 European Conference](https://reader035.vdocuments.site/reader035/viewer/2022062512/554a4c80b4c905863d8b593b/html5/thumbnails/39.jpg)
Brussels Bishkek Geneva
39
Steven De [email protected]
LorenzTroonstraat 14-16 B. 5 Rue du Trône
1000 BrusselsT. 32 2 239 2000 - F. 32 2 239 2002
www.lorenz-law.com
Lorenz