Biometric Data
Definition
Data generated by measuring a person's unique biological characteristics for identification purposes, such as fingerprints, facial geometry, voiceprints, iris scans, and gait patterns. Biometric data is classified as sensitive data under most state privacy laws and requires heightened protections.
Legal Definition
Under the CCPA (Cal. Civ. Code 1798.140(c)): "an individual's physiological, biological, or behavioral characteristics, including DNA, that can be used, singly or in combination with each other or with other identifying data, to establish individual identity." Under the VCDPA, biometric data processed for the purpose of uniquely identifying a natural person is classified as sensitive data.
State Laws Using This Term
Practical Example
A workplace uses fingerprint scanners for building access. The fingerprint templates stored in the system constitute biometric data. Under Illinois' BIPA and most state privacy laws, the employer must obtain consent and provide notice before collecting this data.
Related Terms
Frequently Asked Questions
Is a photograph considered biometric data?
A simple photograph is generally not biometric data. However, if facial recognition technology is used to extract facial geometry measurements from a photo, those measurements constitute biometric data. The distinction is between the image and the biometric template derived from it.