Overview of the Federal Law on the Unified System of Biometric Data
On December 29, 2022, the law on the unified biometric data system (the “Law No. 572-FZ”) was signed. The reason for the adoption of such a regulation was a gap in the legislation in the field of collection and storage of biometric data.
Law No. 572-FZ includes:
• a closed list of types of biometrics: face image and voice sample;
• a ban on the forced collection of biometrics;
• a right of a citizen to revoke at any time the consent to the processing of his biometrics;
• a mechanism for checking information on the given consent to the processing of biometrics, as well as all actions performed with biometric data;
• a prohibition of collection of genomic information;
• a prohibition of cross-border transfer of collected biometrics.
In accordance with Law No. 572-FZ, biometrics will be collected and processed by the Unified Biometric System (the “UBS”). The operator of biometric data in the regional segment can be only a state institution or a state unitary enterprise.
For commercial organizations, information from the UBS can be obtained by concluding a special agreement with the UBS. However, banks still have the right to collect biometrics. In accordance with the new regulation, they must send all collected materials to the UBS in order it to be encrypted and returned in the form of identifiers.
Nadmitov, Ivanov & Partners law firm advises on personal data, information security and electronic services.
Email: info@nplaw.ru
Tel: +7 (495) 649-87-12
On December 29, 2022, the law on the unified biometric data system (the “Law No. 572-FZ”) was signed. The reason for the adoption of such a regulation was a gap in the legislation in the field of collection and storage of biometric data.
Law No. 572-FZ includes:
• a closed list of types of biometrics: face image and voice sample;
• a ban on the forced collection of biometrics;
• a right of a citizen to revoke at any time the consent to the processing of his biometrics;
• a mechanism for checking information on the given consent to the processing of biometrics, as well as all actions performed with biometric data;
• a prohibition of collection of genomic information;
• a prohibition of cross-border transfer of collected biometrics.
In accordance with Law No. 572-FZ, biometrics will be collected and processed by the Unified Biometric System (the “UBS”). The operator of biometric data in the regional segment can be only a state institution or a state unitary enterprise.
For commercial organizations, information from the UBS can be obtained by concluding a special agreement with the UBS. However, banks still have the right to collect biometrics. In accordance with the new regulation, they must send all collected materials to the UBS in order it to be encrypted and returned in the form of identifiers.
Nadmitov, Ivanov & Partners law firm advises on personal data, information security and electronic services.
Email: info@nplaw.ru
Tel: +7 (495) 649-87-12