Legal Pushback Against Biometric Systems in Canada, Greece, and the US – Identity News Digest

Welcome to FindBiometrics’ digest of identity industry news. Here’s what you need to know about the world of digital identity and biometrics today:

French Airports Push to Postpone EES

French airport executives are urging the European Union to postpone the implementation of the Entry/Exit System (EES) until the first quarter of 2025. Currently scheduled to come into force on November 6, 2024, the EES mandates the collection of fingerprints and photographs from non-EU travelers, creating a biometric profile to replace traditional passport stamping. Concerns arise from the insufficiency of time to install these kiosks, especially given the operational halt at Paris airports during the Paris Olympics from May to September. The apprehension extends to potential prolonged waiting times at borders, with the UK Parliament’s European Scrutiny Committee predicting delays up to 14 hours, potentially impacting travelers and the local economy.

Pentagon Sets Up Virtual Workspace for Smaller Contractors

The Pentagon is developing a virtual cloud-based workspace aimed at enhancing cybersecurity for defense contractors, particularly small businesses. Led by David McKeown, the Pentagon’s deputy CIO for cybersecurity, the project will entail a pilot with up to 75 small businesses to test the security efficacy of cloud environments. This effort aligns with a broader industrial cybersecurity strategy aimed at fortifying data and network security within the defense industry base. With only a small fraction of the estimated 200,000 defense contractors currently using the voluntary cybersecurity services offered by the Defense Department’s Cyber Crime Center (DC3), the Pentagon is keen on expanding participation and improving the sector’s overall cyber resilience.

Biometric Privacy Lawsuits Spring Up in Illinois, Montreal

A class action lawsuit has been filed against Wingstop and ConverseNow in Illinois, alleging the unauthorized use of an AI system to record voiceprints during phone orders, in violation of the state’s Biometric Information Privacy Act (BIPA). The lawsuit claims that Wingstop, using ConverseNow’s technology, captured customers’ voiceprints without informing them or obtaining their consent, as mandated by BIPA, which requires disclosure of biometric data collection practices and written consent from individuals. The issue has surfaced as at least 60 Wingstop locations in Illinois reportedly use this AI technology, touted for significantly boosting sales and efficiency by handling multiple calls simultaneously.

A Montreal-based lawyer is spearheading a proposed class action lawsuit against Temu, a discount shopping app owned by Chinese company PDD Holdings Inc., over allegations of unauthorized biometric data collection. The lawsuit claims Temu infringed on customers’ privacy by collecting biometric information such as facial characteristics, fingerprints, voiceprints, and precise geolocations without clear consent, and potentially bypassing standard phone security measures in the process. Temu has denied the allegations, pointing to its adherence to industry practices and transparency in its Privacy Policy. The company also noted its partnership with HackerOne on a bug bounty program, and its achievement of the Mobile Application Security Assessment certification from DEKRA, a German testing firm.

Crete Hotel Workers Warn Against Biometric Time and Attendance Tech

Hotel employees in the Greek island of Crete have expressed concerns over the potential adoption of biometric attendance systems and workplace surveillance cameras by hoteliers, citing potential violations of their legal privacy rights. The Association of Hotel Employees highlighted that such practices infringe upon personal data protection rights guaranteed by Article 9A of the Constitution and other legal provisions, including Law 4624/2019 and EU Regulation 2016/679. They argue that the reception and processing of personal data through biometric methods and video surveillance systems violate these established rights. The association warns that breaches of this legal framework could result in criminal, civil, and administrative penalties, emphasizing the importance of safeguarding employees’ privacy rights against intrusive monitoring methods.

ACLU Seeks Records for Florida City’s Biometric Surveillance System

The ACLU and ACLU of Florida have filed public records requests seeking information about the city of Lakeland’s new facial recognition camera system. The system involves uploading photos of “persons of interest” into the software, enabling detection by any of the 14 cameras installed. Alerts are sent to the “Clean and Safe Manager” who may then inform the police. Critics, including the ACLU and local business owners, worry about the potential for privacy invasion and the accuracy of the system, fearing misidentifications and unnecessary police pursuits. The Lakeland Downtown Development Authority (LDDA) defends the system, citing its use as a deterrent against vandalism and crime, asserting transparency in their operations.

–

April 1, 2024 – by the FindBiometrics Editorial Team