What's Happening?
EPASS Inc., operating as PROFID, has outlined its comprehensive Biometric Privacy Policy, detailing how it handles biometric data for identity verification in background-screening workflows. The policy aims to confirm an individual's identity, detect
fraud, and secure the screening process. Covered Biometric Data includes source selfies, facial images, short videos for facial comparison or liveness analysis, facial geometry, facial maps, and facial templates. PROFID also collects 'Related Verification Data,' which encompasses non-biometric information like identity-document images, device information, and consent evidence. The policy specifies that PROFID will provide separate notices and obtain consent as required by law before processing biometric data, outlining the data categories, purpose, retention period, and disclosures. PROFID explicitly states it does not use biometric data to evaluate qualifications, predict conduct, or make employment decisions. The company adheres to applicable biometric privacy laws, including those in Illinois, Colorado, and Texas.
Why It's Important?
This policy is crucial for individuals undergoing background screenings and for businesses utilizing PROFID's services, as it establishes clear guidelines for the collection, use, and protection of sensitive biometric information. The detailed retention schedules, which vary by state (e.g., Illinois, Colorado, Texas), highlight the increasing legal scrutiny and varying regulatory landscapes surrounding biometric data. For individuals, it provides transparency regarding their data rights and how their unique biological identifiers are managed. For businesses, adherence to such policies is vital for compliance with evolving privacy laws, mitigating legal risks, and maintaining trust with employees and applicants. The emphasis on not selling or profiting from biometric data directly addresses common privacy concerns and aims to build confidence in the security of identity verification processes.
What's Next?
PROFID will continue to operate under this outlined policy, providing specific notices and obtaining consent from individuals as required by law before any biometric data processing. The company is committed to updating its policy to reflect changes in law, technology, or operations, ensuring ongoing compliance with evolving privacy regulations. Individuals will retain the right to request access, correction, or deletion of their biometric data, or to withdraw consent, where applicable laws permit. PROFID will also continue to implement and refine its security safeguards and incident-response protocols to protect biometric data from unauthorized access or disclosure. As biometric technology advances and privacy laws evolve, PROFID's policy will likely undergo further adjustments to maintain its legal and ethical standing in the identity verification industry.
Beyond the Headlines
The detailed biometric privacy policy from PROFID underscores a broader societal shift towards increased reliance on biometric technologies for security and identity verification, coupled with growing concerns about data privacy and misuse. The policy's explicit commitment to not selling or profiting from biometric data, and its strict retention and destruction schedules, reflect a proactive approach to ethical data handling in an era of heightened privacy awareness. This development highlights the ongoing tension between technological advancement and individual privacy rights, pushing companies to adopt robust frameworks that balance security needs with ethical responsibilities. The varying state-specific retention periods also point to a fragmented regulatory environment in the U.S., which could eventually lead to calls for more unified federal biometric privacy legislation to provide consistent protections nationwide.
