CEN/CLC/prTR

Privacy management in products and services - Biometric access control products and services CEN/CLC/prTR

General information

10.99 New project approved   Nov 25, 2020

CEN/CENELEC

CEN/CLC/JTC 13 Cybersecurity and Data Protection

Technical Report

Scope

This document contains recommendations on how to integrate the principle of ‘data protection and privacy by design’
during the entire lifecycle of biometric access-control products and services, in order to achieve ‘data protection and
privacy by default’.
Biometric facial recognition for access control is covered by this document. Biometric facial recognition for surveillance is
covered by CEN/CLC/JTC 13 TR ‘Video surveillance’.
This document specifies recommendations for the management of data protection and privacy by design in biometricaccess-
control products and services. This document extends ISO/IEC 27552. This document applies to aspects of data
protection and privacy by design. This document is not applicable to non-biometric aspects of access control, or to aspects
not relating to data protection or privacy.

Related legislation

Legislation related to this standard

95/46/EC

Protection of individuals with regard to the processing of personal data and on the free movement of such data

Life cycle

NOW

IN_DEVELOPMENT
CEN/CLC/prTR
10.99 New project approved
Nov 25, 2020