Looking identity in the eye: brief considerations on the frontiers of biometric data and identity

 

On the 25th of March 2024, the Portuguese DPA – CNPD – issued a decision to temporarily limit the processing of biometric data relating to the processing operation for the collection of iris, eye, and face data in Portugal, that was being performed by a globally established private company, which, at the time, already had a direct impact on about 300,000 persons in said national territory.[1]

Such data was claimed to be the basis of a universal ID, to be used as proof of personhood and human condition, that is, establishing whether an individual is both human and unique – a digital ID.

This ID was presented as a global digital passport that guarantees people a way to preserve their privacy to authenticate themselves as humans online, in a world where intelligence is no longer a discriminator between people and AI.

It was also argued that the possibility for an individual to claim that he or she is a natural and unique person in the ID users’ network without having to provide additional evidence of their identity is a potentially useful functionality for a number of online services. (...)