Mae'r ICO yn bodoli i'ch grymuso chi drwy gyfrwng gwybodaeth.

I sefydliadau
UK GDPR guidance and resources
Lawful basis
Biometric data guidance: Biometric recognition

Biometric data guidance: Biometric recognition

The Data (Use and Access) Act 2026 got Royal Assent on 19 June 2026. All the provisions affecting data protection law and the Privacy and Electronic Regulations Communications are now in force. The Department for Science and Innovation (DSIT) has set out the commencement plans. You can find more details on the Gov.uk website.

Contents

About this guidance

Key data protection concepts

Biometric recognition

How do we demonstrate our compliance with our data protection obligations?

How do we process biometric data lawfully?

How do we process biometric data fairly?

- How does the statistical accuracy of biometric algorithms relate to the fairness principle?
  - How do we deal with risks resulting from errors?
- How do we deal with the risk of discrimination?

How does the accuracy principle apply to biometric data?

- Does the accuracy principle apply to our biometric recognition system?
- When do we need to collect new biometric samples?

How do we ensure our processing of biometric data is transparent?

- What information do we have to share to comply with the transparency people?
- How should we provide transparency information?

How do we consider rights requests for biometric data?

How do we keep biometric data secure?