Our website uses cookies so we can analyse our site usage and give you the best experience. Click "Accept" if you’re happy with this, or click "More" for information about cookies on our site, how to opt out, and how to disable cookies altogether.

We respect your Do Not Track preference.

Resources and learning

Rule 1 is about your reason for collecting biometric information to use in a biometric system. You need to ensure:

  1. Your collection of biometric information is for a lawful purpose. See our detailed guidance on lawful purpose.
  2. Your collection is necessary, meaning it is an effective way of achieving your purpose and you cannot reasonably achieve your purpose as effectively by an alternative with less privacy risk. See our detailed guidance on assessing necessity.
  3. You have implemented appropriate privacy safeguards. See our detailed guidance on implementing safeguards.
  4. Your biometric processing is proportionate to the likely impacts on people. See our detailed guidance on proportionality.

A flowchart showing the four points discussed as being crucial to Rule 1.

Download a printable version of this flowchart (opens to PDF, 473KB).