Dáil Éireann Debate, Thursday - 12 July 2018
707. Deputy Catherine Murphy asked the Minister for Employment Affairs and Social Protection if biometric data is processed and stored by her Department (details supplied); and if she will make a statement on the matter. [32255/18]
View answerThe GDPR definition of biometric data is as follows:
“‘biometric data’ means personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic data”.
The GDPR clarifies that the processing of certain personal data, such as photographs, should not systematically be considered as biometric data unless such personal data is processed through a specific technical means allowing the unique identification or authentication of a natural person.
My Department uses facial image matching software to strengthen the SAFE registration process. I wish to be clear however that these photographs are, in addition to being printed on the PSC, processed, in a separate process, via facial imaging software to create an arithmetic template which is used to detect potential identity fraud. This arithmetic template is not stored on the Public Services Card, does not form part of the public service identity set, and is not shared with any other third party. They are stored only in the facial image matching software’s database held in the Department’s own secure data centres.
The Department is satisfied that its use of facial imaging software is compliant with the law and is covered by the current legislative framework including the GDPR, the Social Welfare Consolidation Act, and the Data Protection Act 2018. The Department is also clear that it does not collect or share biometric data but that it does create such data for its own use in accordance with the law.
