Biometrics has permeated modern technology, particularly within mobile devices, integrating into daily life. From the 14th century, biometrics has served as a foundational method for security, aiding in criminal identification through physical characteristics records. Advancements in technology have propelled the evolution of precise and automated systems for analyzing facial, vocal, and ocular biometrics. Major tech companies have adopted biometrics as the primary mode of user authentication, catapulting biometric security into the forefront of cybersecurity discussions. Despite the promising future of biometrics, governments worldwide are grappling with the challenging task of regulating the handling of biometric data. Mismanagement of biometric data could pose significant security risks to both individuals and public safety. Therefore, it is crucial to implement comprehensive regulations and legislative reforms to safeguard privacy and security in the era of biometrics. Towards this goal, this paper contributes to the discourse by identifying security and privacy issues related to biometric data. It conducts a comprehensive analysis of current legal frameworks governing biometric data through the lens of the CIAAA (Confidentiality, Integrity, Availability, Authenticity, and Accountability) security framework. Additionally, it highlights emerging trends and outlines the implications for future policymaking and technological advancements in this field.
Read full abstract