Businesses are Harvesting our Biometric Data – Should We Be Worried?

image provided by pixabay

This post is also available in: עברית (Hebrew)

In our highly digital age, biometric data is everywhere- from facial recognition on our phones to fingerprints unlocking our laptops.

Facial recognition is the most common, scanning images or videos from devices and picking out faces – commonly known as computer vision, which is an AI-based technology. The systems usually identify and map 68 specific “facial landmarks” (the corners of the eyes, the tip of the nose, the edges of the lips) to create a digital fingerprint of the face and recognize the person in real-time, creating a representation of the face without storing an actual image, thus enhancing both privacy and efficiency.

According to Techxplore, many businesses are collecting and using biometric data for security purposes, to enhance customer experience, or to improve efficiency. However, this means they must also be responsible for storing and using this data ethically and transparently and addressing the public’s ethical and privacy concerns.

Many privacy activists express their worries about possible rights violations when it comes to capturing and storing biometric data without consent. Indeed, consumers are often reluctant to share personal information, especially since the rise in popularity and accessibility of deepfakes and other impersonation threats.

Another major issue is the matter of consent – how can one give informed consent if they are constantly monitored by cameras and unaware of who is storing and using their data? It is almost impossible to ensure that the public is aware of and agrees to the use of their biometric data without transparent practices and explicit consent mechanisms.

An example of a possible issue with biometric data theft is the fact it cannot be altered. Unlike a stolen credit card that can be canceled, you cannot change your face, making it a high-stakes game when it comes to security – if a database is breached, malicious actors could misuse the data for identity theft, fraud, or harassment.

A possible solution to this growing problem is proper legislation, laws that mandate clear consent before capturing anyone’s biometric data, as well as setting strict standards for how the data is stored and secured in order to prevent breaches. A good starting point could be incorporating the principles of responsible AI into the deployment of facial recognition technology, as it emphasizes fairness, accountability, transparency and ethics.

A major cornerstone for responsible AI is transparency – if a business using facial recognition technology remains secretive about its practices, the public should not trust it with its biometric data.