General Identity When biometric technology is deployed but will not be used for individual identification, as for example, when used to just detect and count people or to estimate the gender and age of a person observing a store display (for marketing research purposes), a general notice appropriate to the context is recommended. Individual Identity Individual Identity is when a facial recognition system is used to compare the template generated from a face image with a template generated from a previously enrolled face image. In such applications, Individual Identity enrollment notices are dependent on the application, taking into consideration such issues as: Voluntary or involuntary enrollment; Type of non-biometric personal data being captured and stored; How that data will be stored and used; Risks and harms, if any, this process may impose on the enrollee; Reasonable expectations with regard to the use of the data. Collection Limitation Principle Identification of the type of biometric that is captured/stored and its relevance to the purpose for which it is being captured/stored; Identification of the non-biometric data for that individual that is being associated with the biometric data; Description of the period of retention (preferably a defined length) or the policy that determines the period of retention. Purpose Specification Principle Specification of why the information is being captured and limiting its use to those purposes. Openness Principle Providing a mechanism so that users for whom data is collected can request a current record of any data retained on them. Use Limitation Principle Limitation of access to the data to certain specified individuals or applications;
General Identity When biometric technology is deployed but will not be used for individual identification, as for example, when used to just detect and count people or to estimate the gender and age of a person observing a store display (for marketing research purposes), a general notice appropriate to the context is recommended. Individual Identity Individual Identity is when a facial recognition system is used to compare the template generated from a face image with a template generated from a previously enrolled face image. In such applications, Individual Identity enrollment notices are dependent on the application, taking into consideration such issues as: Voluntary or involuntary enrollment; Type of non-biometric personal data being captured and stored; How that data will be stored and used; Risks and harms, if any, this process may impose on the enrollee; Reasonable expectations with regard to the use of the data. Collection Limitation Principle Identification of the type of biometric that is captured/stored and its relevance to the purpose for which it is being captured/stored; Identification of the non-biometric data for that individual that is being associated with the biometric data; Description of the period of retention (preferably a defined length) or the policy that determines the period of retention. Purpose Specification Principle Specification of why the information is being captured and limiting its use to those purposes. Openness Principle Providing a mechanism so that users for whom data is collected can request a current record of any data retained on them. Use Limitation Principle Limitation of access to the data to certain specified individuals or applications;