Biometrics

Aug 11 2021

WPF urges the Federal Reserve Board of Governors to ensure quality assurance and control mechanisms for biometric authentication in debit card payment systems

In comments filed with the Federal Reserve Board of Governors, WPF supported proposed language for Comment 235.7 (A)-1, Scope of Restriction, with the understanding that more needs to be done to determine and set quality assurance measures for debit card payment system authentication methods in general, and for biometric methods in particular. WPF requests that

May 10 2021

DHS withdraws proposed rule that would have created mandatory biometrics collection for children

The US Department of Homeland Security (DHS) has withdrawn a proposed rulemaking related to biometric collection, USCIS Docket No. USCIS-2019-0007. Last year, WPF urged DHS to withdraw this biometric rulemaking because the rulemaking lacked scientific facts and basis. WPF also found that the DHS biometric proposal avoided discussion of the new barriers it would have created

May 07 2021

FTC agrees to make compliance report public in face recognition-related case; WPF comments had a positive impact

We are extremely pleased and heartened that after years of requesting that the FTC make compliance reports public, that the Commission has agreed to do so with the Everalbum settlement. WPF submitted comments regarding the Everalbum proposed settlement to the US Federal Trade Commission on February 23, 2021. Today, the FTC announced the final settlement and

Feb 23 2021

WPF comments to the US Federal Trade Commission regarding Everalbum proposal

The World Privacy Forum submitted comments to the US Federal Trade Commission regarding its proposed consent order regarding In the Matter of Everalbum, Inc. The FTC alleges that Everalbum misrepresented to its users the circumstances in which the company would utilize face recognition on its users’ photos. The Commission’s complaint also alleges that Everalbum utilized

Jan 12 2021

FTC proposes precedent-setting face recognition settlement: photo app company must delete consumers’ photos and the algorithmic models it developed using the photos

The FTC has proposed a crucially important settlement with a photo app developer, Everalbum Inc., which the FTC says “deceived consumers about its use of facial recognition technology and its retention of the photos and videos of users who deactivated their accounts.” The proposed FTC settlement will require the company to obtain consumers’ express consent

National IDs Around the World — Interactive map

About this Data Visualization: This interactive map displays the presence...
Report: From the Filing Cabinet to the Cloud: Updating the Privacy Act of 1974

This comprehensive report and proposed bill text is focused on the Privacy Act of 1974, an important and early Federal privacy law that applies to the government sector and some contractors. The Privacy Act was written for the 1970s information era -- an era that was characterized by the use of mainframe computers and filing cabinets. Today's digital information era looks much different than the '70s: smart phones are smarter than the old mainframes, and documents are now routinely digitized and stored and perhaps even analyzed in the cloud, among many other changes. The report focuses on why the Privacy Act needs an update that will bring it into this century, and how that could look and work. This work was written by Robert Gellman, and informed by a two-year multi-stakeholder process.
COVID-19 and HIPAA: HHS’s Troubled Approach to Waiving Privacy and Security Rules for the Pandemic

The COVID-19 pandemic strained the U.S. health ecosystem in numerous ways, including putting pressure on the HIPAA privacy and security rules. The Department of Health and Human Services adjusted the privacy and security rules for the pandemic through the use of statutory and administrative HIPAA waivers. While some of the adjustments are appropriate for the emergency circumstances, there are also some meaningful and potentially unwelcome privacy and security consequences. At an appropriate time, the use of HIPAA waivers as a response to health care emergencies needs a thorough review. This report sets out the facts, identifies the issues, and proposes a roadmap for change.