Biometric Systems and Technologies: Concepts, Types, Functions and Legal Fundamentals in EU Law
DOI:
https://doi.org/10.21564/2414-990X.171.342740Keywords:
biometric technologies, biometric systems, biometric data, personal data, artificial intelligence, Entry/Exit System (EES)Abstract
The issue raised is relevant, firstly, to the growing implementation of biometric systems and technologies across various fields due to the development of artificial intelligence, and secondly, to the corresponding increase in risks and threats associated with their use. The purpose of this article is to explore the theoretical and methodological approaches to studying the use of biometric systems and technologies. It will also address the legal foundations surrounding their regulation, taking into account the provisions of the EU legislation, as well as law enforcement practices. This includes examining decisions made by the European Court of Justice, as well as supervisory authorities of EU member states regarding personal data protection. In this research, the author employed several methods: classification, to explain the existing capabilities of biometrics; comparison, to differentiate between biometric identification (determining identity) and verification (checking identity) as the key functions of biometric systems and technologies; systematization, to compile a list of the most important acts of EU legislation on biometrics, which will serve as guidelines for Ukrainian legislators; and analysis, to examine law enforcement practice. The author describes biometric technologies as a type of technology that processes biometric data for personal identification. A biometric system is defined as an information system that, by converting a person's biological characteristics into a machine-readable format and analyzing them, establishes both a link between biometric data samples, thereby facilitating personal identification, or a belonging of a person to a particular group. In the article, biometric systems and technologies are classified based on the type and number of biological characteristics used, the need for physical contact, and their range of applications. The results of the study reveal contradictions arising from the adoption of biometrics, as confirmed by EU law applications, particularly regarding the justification for the collection, storage, and use of fingerprints and other biometric identifiers without an individual's explicit consent. This underscores the need to improve legal regulation. The article concludes that, alongside provisions on the protection of personal data, an important role in determining the use of biometric systems and technologies is played by both legislation regarding artificial intelligence and legal support for the sectoral implementation of biometric technologies.
References
Berdychenko, I. (2023). Improving the legal procedures of biometric identification and verification of an individual. In VIII Mohyla Legal Readings. All-Ukrainian Scientific and Practical Conference (Program and abstracts, pp. 9-13). Mykolaiv: Publishing House of Petro Mohyla National University of Kyiv [іn Ukrainian].
Boiko, A. (2020). The limits of the lawful circulation of biometric personal data under the legislation of Ukraine. Legal Novels, 10, 142-146 [іn Ukrainian].
Boiko, A. (2021). Protection of biometric personal data by the Commissioner for Human Rights of the Verkhovna Rada of Ukraine. Legal Scientific Electronic Journal, 2, 169–163 [іn Ukrainian].
Martynova, A. (2022). Administrative and legal support for the circulation and protection of biometric personal data (PhD in Law Thesis). Kyiv [іn Ukrainian].
Bryhynets, S. (2019). Biometric data: collection and protection in Europe, the USA and Ukraine. Legal Newspaper, 40 (694) [іn Ukrainian].
Brodkevych, V., Hutsaliuk, M. (2010). Biometrics and protection of fundamental human rights. Fight against Organized Crime and Corruption (Theory and Practice), 23, 293-301 [іn Ukrainian].
Dubonos, K. (2019). Regulatory and legal regulation of the use of biometric databases in Ukraine. Scientific Bulletin of the International Humanitarian University. Jurisprudence, 41, 99-102 [іn Ukrainian].
Dubonos, K. (2021). The use of biometric databases of the expert service units of the Ministry of Internal Affairs of Ukraine during the investigation of criminal offenses (PhD in Law Thesis). Kyiv [іn Ukrainian].
Romanov, V., Haleliuka, I., Haleliuka, O. (2010). Biometric identification of an individual in Ukraine is on time. Worldview, 6, 42-45 [іn Ukrainian].
Stefanchuk, M. (2017). Prospects for adapting Ukrainian legislation to European Union standards in the field of legal regulation of the identification of an individual. Law of Ukraine, 8, 173-181 [іn Ukrainian].
Tarasevych, T. (2021). Legal regulation of biometric identification of a person: National trends and foreign experience. Law Review of Kyiv University of Law, 2, 281-286 [іn Ukrainian].
Shcherbakova, Ya., Bzova, L. (2021). Foreign experience of legal regulation of biometric identification of a person. Scientific Readings in Memory of Hans Gross (Collection of abstracts, pp. 274-278). Chernivtsi: Tekhnodruk [іn Ukrainian].
Knyzhenko, S., Sharaban, O. (2023). Fingerprint registration in Ukraine: Legal regulation and development trends. Scientific Bulletin of the Uzhhorod National University. Series: Law, 79(2), 237-242 [іn Ukrainian].
Draft law of Ukraine "On identification of a person by fingerprinting". (2012). Retrieved from: https://ips.ligazakon.net/document/JF7IC00A?an=3 [іn Ukrainian].
Draft resolution on the rejection of the Draft law of Ukraine "On identification of a person by fingerprinting". (2012). Retrieved from: https://w2.rada.gov.ua/pls/zweb2/webproc4_1?pf3511=43345 [іn Ukrainian].
Zakharov, V., Rudeshko, V. (2015) Biometric technologies in the 21st century and their use by law enforcement agencies. Lviv: Lviv State University of Internal Affairs [іn Ukrainian].
Mykhailyk, A. (2023). Protection of employees' personal data in the context of digital transformation (PhD in Law Thesis). Kharkiv [іn Ukrainian].
Kindt, E. (2013). Privacy and Data Protection Issues of Biometric Applications. Law, Governance and Technology Series. Dordrecht: Springer.
Pato, J., Millett, L. (Eds.). (2010). Biometric Recognition: Challenges and Opportunities. Washington: National Academies Press.
Mordini, E., Tzovars, D. (Eds.). (2012). Second Generation Biometrics: The Ethical, Legal and Social Context. Dordrecht: Springer.
Jain, A., Flynn, P., Ross, A. (Eds.). (2007). Handbook of Biometrics. Boston: Springer.
Biometric in the Dictionary of the Ukrainian language in 11 volumes. (2025). Retrieved from: https://slovnyk.ua/index.php?swrd=біометричний [іn Ukrainian].
Biometrics in the Dictionary of the Ukrainian language in 11 volumes. (2025). Retrieved from: https://slovnyk.ua/index.php?swrd=біометрія [іn Ukrainian].
Biometrics in the Cambridge Dictionary. (2025). Retrieved from: https://dictionary.cambridge.org/dictionary/english/biometrics
Device security guidance. National Cyber Security Centre. (2021). Retrieved from: https://www.ncsc.gov.uk/collection/device-security-guidance/policies-and-settings/using-biometrics
Mordini, E., Petrini, C. (2007). Ethical and social implications of biometric identification technology. Annali dell'Istituto superiore di sanita, 43(1), 5–11.
Wayman, J., Jain, A., Maltoni, D., Maio, D. (2005). An Introduction to Biometric Authentication Systems. In Wayman, J., Jain, A., Maltoni, D., Maio, D. (Eds.). Biometric Systems (pp. 1-20). London: Springer.
Van der Ploeg, I. (1999). The illegal body: 'Eurodac' and the politics of biometric identification. Ethics and Information Technology, 1, 295–302.
Guennouni, S., Mansouri, A. , Ahaitouf , A. (2020). Biometric systems and their applications. In Visual Impairment and Blindness - What We Know and What We Have to Know (pp. 1-12). London: IntechOpen.
Rajvanshi, S., Chauhan, S., Kaur, S. (2022). A new wave in biometric system: Systematic study. CGC International Journal of Contemporary Technology and Research, 4(2), 300-305.
Pisani, P.H., Mhenni, A., Giot, R., Cherrier, E., Poh, N., de Carvalho, A.C., Rosenberger, C., Essoukri Ben Amara, N. (2019). Adaptive Biometric Systems: Review and Perspectives. ACM Computing Surveys, 52(5), Article 102.
Prabhakar, S., Pankanti, S., Jain, A. (2003). Biometric Recognition: Security and Privacy Concerns. IEEE Security & Privacy, 1(2), 33 - 42.
Luis-Garcia, R., Alberola-Lopez, C., Aghzout, O., Ruiz-Alzola, J. (2003). Biometric identification systems. Signal Processing, 83(12), 2539-2557.
Opinion 3/2012 on developments in biometric technologies. (2012). Retrieved from: https://ec.europa.eu/justice/article-29/documentation/opinion-recommendation/files/2012/wp193_en.pdf
Kloppenburg, S., van der Ploeg, I. (2018). Securing Identities: Biometric Technologies and the Enactment of Human Bodily Differences. Science as Culture, 29, 57-76.
Rosenzweig, P., Kochems, A., Schwartz, A. (2004). Biometric Technologies: Security, Legal, and Policy Implications. Legal Memorandum, 12, 1-10.
El-Rahman, S., Alluhaidan, A.S. (2024). Enhanced multimodal biometric recognition systems based on deep learning and traditional methods in smart environments. PLoS ONE, 19(2), Article e0291084.
Tistarelli, M., Li, S., Chellappa, R. (Eds.). (2009). Handbook of Remote Biometrics for Surveillance and Security. London: Springer.
North-Samardzic, A. (2020). Biometric Technology and Ethics: Beyond Security Applications. Journal of Business Ethics, 167, 433–450.
Directive 95/46/EC of the European Parliament and of the Council of 24 October 1995 "On the protection of individuals with regard to the processing of personal data and on the free movement of such data". (1995). Retrieved from: https://zakon.rada.gov.ua/laws/show/994_242#Text
Council Regulation (EC) No 2252/2004 of 13 December 2004 on standards for security features and biometrics in passports and travel documents issued by Member States. Retrieved from: https://eur-lex.europa.eu/eli/reg/2004/2252/oj/eng
Integration of biometric features in passports and travel documents. (20) Retrieved from: https://eur-lex.europa.eu/EN/legal-content/summary/integration-of-biometric-features-in-passports-and-travel-documents.html
Regulation (EC) No 444/2009 of the European Parliament and of the Council of 28 May 2009 amending Council Regulation (EC) No 2252/2004 on standards for security features and biometrics in passports and travel documents issued by Member States. (2009). Retrieved from: https://eur-lex.europa.eu/eli/reg/2009/444/oj/eng
Regulation (EU) 2019/1157 of the European Parliament and of the Council of 20 June 2019 on strengthening the security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members exercising their right of free movement. (2019). Retrieved from: https://eur-lex.europa.eu/eli/reg/2019/1157/oj/eng
Lang, A. Of Biometric Documents, Databases and Free Movement of Persons in the EU. (2023). EU and Comparative Law Issues and Challenges Series, 7, 119-143.
Regulation (EU) 2017/2226 of the European Parliament and of the Council of 30 November 2017 establishing an Entry/Exit System (EES). (2017). Retrieved from: https://eur-lex.europa.eu/eli/reg/2017/2226/oj
Regulation (EU) 2025/1534 of the European Parliament and of the Council of 18 July 2025 on temporary derogations from certain provisions of Regulations (EU) 2017/2226 and (EU) 2016/399. (2025). Retrieved from: http://data.europa.eu/eli/reg/2025/1534/oj
Entry/Exit System (EES). (2025). Retrieved from: https://travel-europe.europa.eu/ees/ltr
Austin K. How will the EU's new border system work? (2025). Retrieved from: https://www.bbc.com/news/articles/c39rkpe8mj2o
Buckley, J. (2025). Traveling to the European Union is about to get more complicated. Here’s what you need to know. Retrieved from: https://edition.cnn.com/2025/10/10/travel/eu-entry-exit-system-explained
Hachkevych, A. (2022). "Double standards" of temporary protection of refugees from the war in Ukraine in EU Migration Policy; Mediaforum, 11, 162–179 [in Ukrainian].
Council Regulation (EC) No 2725/2000 of 11 December 2000 concerning the establishment of 'Eurodac' for the comparison of fingerprints for the effective application of the Dublin Convention. (2020). Retrieved from: https://eur-lex.europa.eu/eli/reg/2000/2725/oj/eng
Regulation (EU) No 603/2013 of the European Parliament and of the Council of 26 June 2013 on the establishment of 'Eurodac' for the comparison of fingerprints for the effective application of Regulation (EU) No 604/2013. (2013). Retrieved from: http://data.europa.eu/eli/reg/2013/603/oj
Regulation (EU) 2024/1358 of the European Parliament and of the Council of 14 May 2024 on the establishment of 'Eurodac'. (2024). Retrieved from: https://eur-lex.europa.eu/eli/reg/2024/1358/oj
Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data. (2016). Retrieved from: https://eur-lex.europa.eu/eli/reg/2016/679/oj/eng
Directive (EU) 2016/680 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data by competent authorities. (2016). Retrieved from: https://eur-lex.europa.eu/eli/dir/2016/680/oj/eng
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence. (2024). Retrieved from: https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng
C-61/22 - RL v Landeshauptstadt Wiesbaden. (2024). Retrieved from: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62022CJ0061
C‑291/12 - Michael Schwarz v Stadt Bochum. (2013). Retrieved from: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=celex:62012CJ0291
C-205/21 - Ministerstvo na vatreshnite raboti (Enregistrement de données biométriques et génétiques par la police). (2023). Retrieved from: https://curia.europa.eu/juris/liste.jsf?language=en&num=C-205/21
C-118/22 - Direktor na Glavna direktsia "Natsionalna politsia" pri MVR – Sofia. (2024). Retrieved from: https://curia.europa.eu/juris/liste.jsf?num=C-118/22
Facial recognition in school renders Sweden's first GDPR fine. (2020). Retrieved from: https://www.edpb.europa.eu/news/national-news/2019/facial-recognition-school-renders-swedens-first-gdpr-fine_sv
Dutch DPA imposes fine on company using fingerprint technology for attendance and time registration. (2020). Retrieved from: https://www.datenschutz-notizen.de/dutch-dpa-imposes-fine-on-company-using-fingerprint-technology-for-attendance-and-time-registration-4325764/
Lithuanian DPA: Fine Imposed on a Sports Club for Infringements of the GDPR in Processing of Fingerprints of the Customers and Employees. (2021). Retrieved from: https://www.edpb.europa.eu/news/national-news/2021/lithuanian-dpa-fine-imposed-sports-club-infringements-gdpr-processing_en
Belgian watchdog ruling on consent sets employee biometrics use against GDPR. (2024). Retrieved from: https://www.biometricupdate.com/202411/belgian-watchdog-ruling-on-consent-sets-employee-biometrics-use-against-gdpr
The French SA fines Clearview AI EUR 20 million. (2022). Retrieved from: https://www.edpb.europa.eu/news/national-news/2022/french-sa-fines-clearview-ai-eur-20-million_en
Published
How to Cite
Issue
Section
License
Copyright (c) 2025 Андрій Гачкевич
This work is licensed under a Creative Commons Attribution 4.0 International License.
