The National Data Protection Authority (ANPD) (Brazil's National Data Protection Authority) launched on Monday (02) a public input process on the topic "Processing of Sensitive Personal Data – Biometric Data," as established in its Regulatory Agenda for 2025–2026. The initiative, coordinated by the General Coordination for Normalization, seeks contributions from society to guide the agency's future regulatory action regarding the use of this sensitive personal data category. The consultation will remain open until July 2, 2025, through the Participa + Brasil platform.
The growing use of biometric data — including fingerprints, facial recognition, iris scans, and behavioral patterns — has sparked important debates about the boundaries needed for its safe application. While offering significant benefits in terms of security and authentication, this data poses substantial risks to privacy and fundamental rights, particularly when used in automated ways in contexts such as educational institutions, border control, public events, workplaces, and financial transactions.
The consultation is structured around five thematic blocks covering the main aspects of biometric data processing: Definitions and Principles; Legal Bases; Facial Recognition Technologies and Emerging Technologies; Security, Best Practices, and Governance; and Data Subject Rights and Vulnerable Groups. This framework aims to broaden the debate on the key challenges, risks, and best practices associated with the processing of such sensitive data.
The guiding questions were developed based on comparative research of international references, including the European Union's General Data Protection Regulation (GDPR) and guidelines from authorities such as the UK's ICO, Spain's AEPD, France's CNIL, and the European Data Protection Board. The ANPD emphasizes the importance of broad participation from diverse sectors of society — including academia, public and private entities, and experts in technology and digital rights — to build a balanced regulatory framework aligned with global best practices.
This post was summarized from its original version with the use of AI, with human review.
With information from ANPD