Biometric Access Control to Professional Premises

Article 2 of Law No. 1.565 of December 3,  2024 defines biometric data as « personal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that person, such as facial images or dactyloscopic data ».

Biometrics therefore encompasses:

• physical characteristics: iris, voice, fingerprints, hand vein network, hand outline, etc.;
• behavioural characteristics: gestures, gait, etc.

These data are classified as sensitive data when processed for the purpose of uniquely identifying or authenticating a natural person. Under Article 7 of Law No. 1.565, an employer may only process such data if strictly necessary for controlling access to workplaces and to devices and applications in the course of employees’ duties.

To continue reading, you can download the factsheet here