نوع مقاله : مقاله پژوهشی

نویسندگان

1 دانش‌آموخته کارشناسی ارشد حقوق بشر دانشگاه علامه طباطبائی، تهران، ایران

2 دانشیار گروه حقوق عمومی و بین‌الملل دانشگاه علامه طباطبائی، تهران، ایران

چکیده

امروزه با وجود پیشرفت روزافزون فناوری‌ها و برنامه‌های کاربردی، زمینه پردازش داده‌های بیومتریک به طور مداوم در حال تحول است. در این میان به رسمیت شناختن حق بر حریم خصوصی در ارتباط با پردازش داده‌های بیومتریک جنبه مهمی از موضوع حفاظت از داده‌ها و حقوق بشر است. پرسش اصلی مقاله این است که استفاده از داده‌های بیومتریک که بعضا فراتر از هدف احراز هویت یا شناسایی می‌باشد، چه تاثیراتی بر زندگی خصوصی افراد دارد؟ و دیگر اینکه در وضعیتی که قانون ایران به‌طور صریح به داده‌های بیومتریک نپرداخته است؛ چه تدابیری را می‌توان اندیشید؟ یافته‌های پژوهش ناظر برآن است، به علت ماهیت خاص و بسیار حساس داده‌های بیومتریک، نیاز به وجود قوانینی متقن در راستای حفاظت از چارچوب زندگی خصوصی افراد بیش از پیش احساس می‌شود. ایجاد تعادل میان نیاز به امنیت عمومی و حقوق حریم خصوصی یک چالش پیچیده است. همچنین ایجاد چارچوب‌های قانونی روشن، مکانیسم‌های نظارتی و اقدامات پاسخگویی به منظور اطمینان از استفاده قانونی و مسئولانه از داده‌های بیومتریک بسیار حائز اهمیت خواهد بود.

کلیدواژه‌ها

موضوعات

عنوان مقاله [English]

Biometric Data Processing and Its Impact on Private Life: The Legislation of the European Union and the Council of Europe

نویسندگان [English]

  • Rezvaneh Mirzavand 1
  • Roya Motamednejad 2

1 LLM, Human Rights, Allameh Tabataba’i University, Tehran, Iran

2 Associate Professor, Public Internaional Law, Allameh Tabataba’i University, Tehran, Iran

چکیده [English]

Introduction

Biometrics is derived from two Greek words: bios, meaning life, and metrikos, meaning measurement. Biometrics, or biocompatibility, refers to the practical method of identifying and authenticating individuals using biological, morphological, and behavioral characteristics. Biometric data can be categorized into the three types: biological data, morphological data, and behavioral data. Biological data involves traits at the genetic and molecular levels. Examples include DNA properties or blood that can be examined through samples of bodily fluids such as blood, saliva, or urine. Morphological data pertains to an individual’s physical structure. This includes features such as the eye (iris and retina), hand shape, fingers, fingerprint, vein patterns, and facial structure. Behavioral data varies based on unique patterns that differ from person to person. Examples include voice recognition, speech patterns, signature dynamics (e.g., speed, swiftness, and pressure), keyboard dynamics, typing patterns, interaction with objects, walking style, the sound of footsteps, and body movements. These patterns can also serve as indicators of individual identity.
Despite the sensitive nature of biometric data, there are currently very few international legal regulations specifically designed to protect it. Most existing legal texts address biometric data in a general sense, only within the broader context of personal data protection and privacy laws.
The current study aimed to explore the opportunities and challenges facing biometric technology, particularly in terms of privacy concerns.
It proposed a conceptual framework focused on biometric technology, with an emphasis on European law (specifically those of the European Union and the Council of Europe). The goal was to analyze how legislation can evolve alongside technological advancements and determine which aspects of biometric data require more precise legal protections. European legislation is currently attempting to strike a balance between encouraging innovation in biometric technology and ensuring the protection and security of biometric data. To strengthen


privacy rights in Iran, the experiences and initiatives of the European Union and the Council of Europe can serve as valuable models for inspiration.

Literature Review

The approvals available on the European Union and Council of Europe websites allow for the examination of the impact of using biometric data. In this context, particular attention is given to the right to personal data protection and the growing need to strengthen it in the digital age, especially in Europe (Motamed-Nejad, 2019). The book Introduction to Biometrics (Jain et al., 2011) emphasized the importance of biometrics in its final chapter, highlighting the importance of data security and privacy. The edited volume titled Security and Privacy in Biometrics (Campisi, 2013) provided a comprehensive legal analysis of privacy concerns and the protection of biometric data. It also offered several recommendations for establishing a transnational surveillance framework. Another key text is Biometric Security and Privacy: Opportunities and Challenges in the Big Data Era (Jiang et al., 2013). The chapters discussed special biometric technologies, privacy and security issues (e.g., cancelable biometrics and soft biometrics), medical biometrics, healthcare, and human–robot interaction. Moreover, Biometrics in a Data Driven World: Trends, Technologies, and Challenges (Mitra & Gofman, 2017) explores the challenges of using biometric data in social networks, healthcare programs, mobile authentication, etc. The topic has been addressed—directly or indirectly—within the legal frameworks of the European Union and the Council of Europe.


Regulatory documents, including transition regulations in the field of data protection, are also relevant. While the relevant sources may be limited, they can be consulted indirectly.

Materials and Methods

The present study employed an analytical approach to examine the regulations of the European Union and the European Council. The library research was used to collect the data, relying on both internet resources and authentic publications such as books and journal articles.

Results and Discussion

Biometric data is increasingly used in health-related applications, such as biometric monitoring devices, telemedicine, and electronic health records. Moreover, biometric data plays a role in smart city initiatives, serving purposes like surveillance, public safety, and personalized services. The field of biometric data processing is rapidly evolving, along with its legal and regulatory landscape. New laws, regulations, and guidelines may be necessary to address emerging challenges and ensure the protection of privacy rights. It is thus crucial for organizations and individuals involved in biometric data processing to stay informed about these developments. Research and development in this field can further help reduce privacy risks. In today’s digital age, data privacy is a critical concern. As more personal information is shared and stored online, the risks associated with its collection and use continue to grow. A major concern when processing biometric data is the potential for data breaches. Biometric data can also be misused for illegal activities such as fraud, theft, and impersonation.


To address these risks, it is essential that organizations and governments take serious measures to ensure privacy and security, protect civil rights, and prevent discrimination. This includes being transparent about how biometric data is collected and used, obtaining explicit consent from individuals, and enforcing strong security protocols to prevent data breaches. Additionally, biometric systems must be designed and tested to minimize bias and discrimination. It is equally important for individuals to understand the potential risks and consequences of biometric data processing and to take proactive steps to protect their privacy and data security.

Conclusion

The use of biometric data can have significant implications for civil freedoms and human rights. As such, legislators play a crucial role in formulating laws and regulations to safeguard the right to privacy and other fundamental rights, especially given the dynamic nature of biometric data processing. Judicial cases and legal procedures also contribute to shaping the legal framework surrounding privacy and biometric data processing. It is essential to offer educational materials and raise awareness about biometric data processing and privacy. Individuals must be informed about the risks, benefits, and their rights in relation to biometric data processing. It is also important to consider the ethical, legal, technological, and social dimensions of biometric technologies to ensure that individual rights and privacy are respected and protected. In an increasingly biometric-driven world, finding the right balance between the potential benefits and risks of these technologies is critical. Above all, privacy must be upheld as a fundamental human right.

کلیدواژه‌ها [English]

  • Biometric Data
  • Private Life
  • Processing
  • European Union
  • Council of Europe
مقاله ­ها­
- داشاب، مهریار، «بخش اسناد حقوقی بین‌المللی، منشور حقوق اساسی اتحادیه اروپایی»، فصلنامه پژوهش حقوق عمومی، دوره 6، شماره 13، (1383).
- معتمدنژاد، رویا، «قانونگذاری در عرصه دیجیتال و برنامه توسعه پایدار (با تأکید بر «جمهوری دیجیتال»)»، نشریه علمی مطالعات فرهنگی و ارتباطات، سال 13، شماره 49، زمستان (1396).
- معتمدنژاد، رویا، «وظایف دولت‌ها در عرصه تکنولوژی‌های دیجیتال از دولت انحصارطلب تا دولت رگولاتور»، فصلنامه علوم خبری، دوره 7، شماره 28، (1397).
References
Books
- Anil K, Jain & Arun A. Ross, Karthik Nandakumar, Introduction to Biometrics (New York: Springer, 2011).
- Dibble, Suzanne, GDPR for Dummies, 1st Edition (New Jersey: For Dummies, 2020).
- European Union Agency for Fundamental Rights and Council of Europe, Handbook on European Data Protection Law (Luxembourg: Publications Office of the European Union, 2018).
- Holder, Eric, Jr. Laurie O. Robinson, John H. Laub, The Fingerprint: Sourcebook (New York: Create Space Publishing, 2014).
- Jiang, Richard, Biometric Security and Privacy Opportunities & Challenges in The Big Data Era (Paris: Springer, 2017).
- Kindt, Els, Privacy and Data Protection Issues Of Biometric Applications a Comparative Legal Analysis (Dordrecht: Springer, 2013).
- Kuner, Christopher (ed), Drechsler, Laura (ed), The EU General Data Protection Regulation (GDPR): A Commentary (Oxford: Oxford University Press, 2020).
- Sharma, Sanjay, Data Privacy and GDPR Handbook, 1st Edition (New Jersey: Wiley, 2019).
- Sinjini, Mitra & Gofman, Mikhail, Biometrics in a Data Driven World: Trends, Technologies, and Challenges, 1st Edition (Chapman and Hall/CRC, 2017).
- Smith, Marcus & Seumas, Miller, Biometric Identification, Law and Ethics, (Switzerland: Springer, 2021).
Articles
- Anil K. Jaina, Karthik Nandakumar, Arun Ross, “50 Years of Biometric Research: Accomplishments, Challenges, and Opportunities”, Pattern Recognition Letters, Vol. 79, (2016).
- Anil K. Jain, “An Introduction to Biometric Recognition”, IEEE Transactions on Circuits and Systems for Video Technology, Vol. 14, No. 1, (2004).
- De Terwangne, Cécile, “Council of Europe Convention 108+: A Modernised International Treaty for the Protection of Personal Data”, Computer Law & Security Review, Vol. 40, (2021).
- Fierrez, Julian, Aythami, Morales, Ruben, Vera-Rodriguez, David, Camacho, “Multiple Classifiers in Biometrics. part 1: Fundamentals and Review”, Information Fusion, Vol. 44, (2018).
- Gomez-Arostegui, Tomas, “Defining Private Life Under the European Convention on Human Rights by Referring to Reasonable Expectations”, California Western International Law Journal, Vol. 35, No. 2, (2005).
- Hartmut, Aden, “Privacy and Security: German Perspectives, European Trends and Ethical Implications”, Ethical Issues in Covert, Security and Surveillance Research Advances in Research Ethics and Integrity, Vol. 8, (2022).
- Hert, Paul & Vagelis Papakonstantinou, “The Council of Europe Data Protection Convention Reform: Analysis of the New Text and Critical Comment on Its Global Ambition”, Computer Law & Security Review, Vol. 30, (2014).
- Janelle, Mason, Rushit, Dave, Prosenjit, Chatterjee, Ieschecia, Graham-Allen, Albert, Esterline, Kaushik, Roy, “An Investigation of Biometric Authentication in the Healthcare Environment”, Array, Vol. 8, (2020).
- Mohiqi, Mohammad Mustafa, “Personal Data Protection in the Iranian Legal System”, Journal of Politics and Law, Vol. 16, No. 3, (2023).
- Prabhakar, Salil & Anil Kumar Jain, “Biometric Recognition: Security and Privacy Concerns”, IEEE Security and Privacy Magazine, Vol. 1, (2003).
- Ratha Nalini K, Jonathan Connell, R. M. Bolle, “Enhancing Security and Privacy in Biometrics-Based Authentication Systems”, IBM Systems Journal, Vol. 40, No. 3, (2001).
- Remenyi Dan & Paul Griffiths, “Data: Its Nature and Management a Short Note on Some of the Complexity Behind the Concept of Data”, The Electronic Journal of Business Research Methods, Vol. 20, No. 3, (2022).
- Sanchez-Reillo, Raul, Ines Ortega-Fernandez, Wendy Ponce-Hernandez, Helga C. Quiros-Sandoval, “How to Implement EU Data Protection Regulation for R&D in Biometrics”, Computer Standards & Interfaces, Vol. 61, (2018).