At our organization, we prioritize compliance with both the Personal Data Protection Act (PDPA) and the General Data Protection Regulation (GDPR) in our FingerTec biometric verification technologies. We understand the critical nature of safeguarding sensitive biometric data, including fingerprints, facial recognition, and palm scans. As a result, we have incorporated key principles into our systems, such as lawful processing, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. By adhering to these guidelines, we protect our users’ sensitive personal data and fulfill the legal requirements of both PDPA and GDPR.
To further enhance security, FingerTec fingerprint, facial recognition, and palm terminals encrypt the biometric template, ensuring the matching process remains exclusively within the devices without any external processing. The acquired data is compared to the terminal device’s database, and the result is saved locally and securely transmitted to the client using the SSL/TSL encryption algorithm, with a random encryption algorithm for the sent data.
We would like to address several points about the treatment of biometric temperature data within FingerTec systems. FingerTec terminals are not medical devices, they are designed to measure human skin temperature as a technical measure within the scope of occupational risk prevention.
The terminals do not store any data. These contactless systems can detect skin temperature and whether a person is wearing a mask, without retaining the data. If abnormal temperature levels are detected, an alert is sent, enabling healthcare personnel to conduct further examinations.