Legal basis for processing biometric data from refugees - An analysis of the GDPR and following practices

Abstract

Protection of personal data is the most important legal standard when collecting and processing biometric data from individuals. Iris and fingerprint scans are commonly used as identification in humanitarian action. This in formation falls under special categories of personal data in accordance with Article 9(1) of the GDPR, and needs to be processed properly to ensure the right to the protection of personal data and minimize risks. The problem discussed in this thesis is related to processing of biometric data from refugees done by NGOs working in humanitarian action, specifically the processing of data from iris scanning technology. The usage of biometric data is becoming more common, and raises several questions in relation to how it can be processed for use in humanitarian action.