The use of privacy enhancing aspects of biometrics: Biometrics as PET (privacy enhancing technology) in the Dutch private and semi-public domain

In this project, we have assessed the PET aspects of biometric applications currently in use in the
private and semi-public sector in the Netherlands. As defined above, privacy enhancing technologies
refer to a variety of technologies that protect personal privacy by minimizing or eliminating the
collection of identifiable data. We have looked at the legal framework for using biometrics in the EU
and the Netherlands and at privacy enhancing characteristics of current biometric technologies. We
have observed that whilst the biometric applications can introduce many benefits, they can also cause
new privacy and security risks and vulnerabilities. Decisions that determine how (and which)
biometrics will be used in any particular system set the standard. The security of the system that the
biometric application will become part of is equally crucial. In one of the earlier articles on biometrics
Grijpink stated some basic rules for the use of biometrics: sectoral boundaries87, clear, recognizable
and permissible objective, proportionality, subsidiarity, precise delineation of the target group, security and external supervision. We have seen that some of these principles have come under
considerable pressure since 2001.