Identity News Digest – May 3, 2024

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

Proposed Bill Would Extend Colorado’s Facial Recognition Task Force

House Bill 1468, which seeks to expand Colorado’s facial recognition and biometric technologies task force, has narrowly passed a committee vote. Originally focused on government use of facial recognition, the bill proposes to increase the task force’s membership from 15 to 17 by adding experts in generative AI and biometrics or social media and to widen its scope to include broader AI and biometric technology applications. Despite support from bill sponsor Rep. Brianna Titone, who argues for the necessity of adaptation to rapid technological changes, concerns have been raised by critics like ACLU’s Anaya Robinson about diluting the focus on government surveillance.

Liberia Embarks On National Biometric ID Project

The Government of Liberia is initiating mass enrollment into a national biometric identification system for both citizens and foreign residents, coordinated by the National Identification Registry (NIR) and supported by the Ministry of State for Presidential Affairs. The program is designed to enhance data management for government services, including elections. Although previous biometric initiatives faced skepticism and controversy over vendor selection and procurement integrity, the successful deployment of a biometric voter registration system in the 2023 elections demonstrated the potential for success in implementing advanced identification technologies in Liberia.

CIPL Report Calls for Risk-Based Approach to Biometrics Regulation

The Centre for Information Policy Leadership (CIPL) has issued a report recommending a risk-based approach to biometric technology regulation. It underscores the need for proportional regulations that align with the specific risks and benefits of biometric applications in fields such as security, healthcare, and accessibility. The report emphasizes the importance of consistent definitions for biometric data across different industries, advocates for organizational accountability in deploying biometric technologies, and supports collaborative innovation through regulatory sandboxes. These measures aim to balance privacy protection with technological advancement.

Suspect Charged After ClubsNSW Data Breach

A 46-year-old man has been charged with blackmail following a significant data breach at ClubsNSW, which compromised the personal information of over a million individuals, including facial recognition data, driver’s license scans, and addresses. The suspect, identified during the investigation, faces charges related to the possession and misuse of personal information. The leak was reportedly published by a website claiming that unpaid developers responsible for creating software for clubs and casinos were behind the incident. Outabox, the IT provider implicated, has recognized a cybersecurity incident but denies the allegations as false and defamatory. Authorities are actively working to mitigate the breach’s impact and have advised those potentially affected to await further instructions.

Microsoft Strengthens Ban on Police Use of Azure AI for Facial Recognition

Microsoft has updated the terms of service for its Azure OpenAI Service, now explicitly prohibiting U.S. police departments from using the platform for any facial recognition activities. The policy revision also extends to a global ban on the use of “real-time facial recognition technology” in conjunction with mobile cameras. While the ban primarily targets U.S. police, it does not completely close the door on international law enforcement agencies using the service for similar purposes, nor does it address the use of stationary cameras by U.S. forces. The move is part of broader discussions and evolving policies surrounding the ethical use of AI in defense and law enforcement contexts by major technology firms, including Microsoft’s ongoing collaborations with OpenAI and the Pentagon.

Two More Businesses Face Time Clock BIPA Lawsuits

Two companies, Anviz Global Inc. and Supply Network Inc., are facing lawsuits under Illinois’s Biometric Information Privacy Act (BIPA) over their use of biometric time clocks. Anviz Global, a provider of workforce management solutions, allegedly failed to disclose its data collection practices and did not obtain written consent from employees for collecting biometric data through its facial recognition system. Similarly, Supply Network, a distributor under the Viking SupplyNet brand, is accused of not providing necessary disclosures or obtaining consent for its fingerprint or hand geometry time clocks. Efforts by Supply Network to dismiss the lawsuit based on legal technicalities were rejected by a U.S. District Court judge in Illinois, allowing the case to proceed.

–

May 3, 2024 – by Alex Perala and Tony Bitzionis