Biometrics and Consumer Applications

The use of biometrics in business applications directed at consumers is ever-evolving, and various research firms and industry experts anticipate the growth of the biometric industry to be significant in the near future.

• One industry study said that biometrics will expand to a $1 billion industry by the year 2000.
• In 1997, Bill Gates, Microsoft Corporation, predicted that biometric technologies will be one of "the most important IT innovations of the next several years."

Some experts even predict that the rush to install biometric security systems will replace the Year 2000 computer crisis as the most pressing high-tech project after the millennium.

Regardless of the prediction, it is clear that the commercial use of biometrics is expanding worldwide. As examples, facial and iris recognition are being incorporated into Automated Teller Machines; financial institutions are using fingerscanning to identify clients; and finger geometry is used to control access to major theme parks.

There are indications that public understanding and acceptance of biometrics is increasing. For example, one American survey indicated that 87% of respondents thought fingerprinting was a legitimate identification requirement. The survey found that 91% believed that it was justified to use finger imaging to control entry to high security areas, 77% to verify the identity of persons cashing personal cheques for large amounts; and 76% to identify persons using credit cards for major purchases. More than four out of five (83%) respondents rejected the view that using finger imaging to verify people's identity was treating them like presumed criminals.

While consumer biometric applications are still rare in Canada, the IPC anticipates Canada will not be exempt from the significant growth in the technology's use.

Accordingly, to help ensure the introduction of biometrics into the commercial environment does not unduly compromise privacy, the IPC has published Consumer Biometric Applications: A Discussion Paper, which is designed to give consumers an overview of the technology, explain how and why it is used, the potential benefits associated with the technology for both business and consumers, as well as outline a number of privacy issues and questions they should consider prior to consenting to the use of their biometric.
In particular, the IPC's position is that in the absence of data protection legislation for the private sector, or specific legislation regulating the use of biometric identifiers, consumers need to represent and advocate their own privacy interests regarding their biometric data. To do so, they need to be aware of both the benefits and dangers associated with biometrics in order to make an informed choice about whether to participate in consumer biometric applications.

The IPC advises consumers that when they enrol in most biometric systems, they may be required to relinquish control over something that is highly personal and virtually immutable. Caution is advisable. However, the IPC also contends that biometrics need not subvert informational privacy. A pro-privacy position should not be construed as an anti-biometric stance.

Biometric data, itself, can serve as an effective security safeguard when it is controlled by its owner (e.g., to restrict access to one's information by acting as one's private encryption key, or as an access control mechanism to secure a physical area or device containing confidential information). If at all possible, consideration should be given to whether the consumer biometric application can be designed so that consumers can have control their own biometric data.

Many private and government organizations believe that the informational privacy concerns associated with biometrics can be effectively addressed if the technology is used in accordance with fair information practices.

back