Processing of personal data in Pharmacies: Use of biometric data

messi74

The processing of biometric data involves authenticating the identity of individuals through highly personal physical and biological characteristics, such as the recognition of fingerprints, voice, face, iris and even DNA. Technologies that use biometric data have represented advances in a context of increasing datafication and digitalization, which is corroborated by tools that increase the accuracy of this authentication. In practice, the use of biometrics reduces friction in everyday transactions and applications, and can be applied to smartphone access systems (fingerprint and facial biometrics, for example) and physical spaces (such as controlling the flow of people at borders), as well as in identity authentication systems in ATMs (preventing financial fraud), in applications (confirming the identity of passengers in individual transportation applications), medical offices and laboratories, and electronic voting machines.

Biometrics can be considered a part of the three-factor gambling data south africa identification of a data subject, which consists of knowing i) what the user has (key, token, card, badge, etc.); ii) what the user knows (name or user ID, password, etc.); and iii) what the user is (biometric data). The use of the factors in this three-factor identification is usually proportional to the needs of the subject's identity authentication. In other words, the more essential the accuracy of the identification is (for the purposes of preventing financial fraud, for example), the more factors are usually used. As a consequence of this use of multiple identity authentication factors, the security measures necessary to safeguard the data subjects' data must also accompany the use of these factors.




Conclusions on the Technical Note
The study made clear the problem of consent, its possibilities of being flawed and the lack of transparency of companies (industry, management platforms and retail) about the practices adopted in the sector and the lack of maturity in relation to the governance of privacy and personal data, which should be improved.

The ANPD understands that the exploratory study increased the Authority's understanding of personal data flows in pharmacy business models, and that this knowledge can be transferred to society through the preparation of educational material for the sector, together with the General Coordination of Standardization. Any such material could contain the concerns raised here and appropriate adaptation measures for the types of treatments described here.