FingerTec Biometric Verification Technologies Ensure Compliance with PDPA and GDPR

Wednesday, April 19, 2023 TimeTec 0 Comments

At our organization, we prioritize compliance with both the Personal Data Protection Act (PDPA) and the General Data Protection Regulation (GDPR) in our FingerTec biometric verification technologies. We understand the critical nature of safeguarding sensitive biometric data, including fingerprints, facial recognition, and palm scans. As a result, we have incorporated key principles into our systems, such as lawful processing, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality, and accountability. By adhering to these guidelines, we protect our users' sensitive personal data and fulfill the legal requirements of both PDPA and GDPR.

Biometric systems like FingerTec Time Attendance and Access Control do not store images of fingerprints, faces, or palms. Instead, our FingerTec technology captures these images and extracts identifiable features (or data points) from them. A sophisticated algorithm then converts these data points into a digital code, which forms the biometric template.

To further enhance security, FingerTec fingerprint, facial recognition, and palm terminals encrypt the biometric template, ensuring the matching process remains exclusively within the devices without any external processing. The acquired data is compared to the terminal device's database, and the result is saved locally and securely transmitted to the client using the SSL/TSL encryption algorithm, with a random encryption algorithm for the sent data.
When removing biometric templates and patterns from FingerTec terminals and devices, the system guarantees complete deletion by erasing the associated template in the database, memory, and operation log.

Temperature Data on FingerTec Access Control Systems

We would like to address several points about the treatment of biometric temperature data within FingerTec systems. FingerTec terminals are not medical devices, they are designed to measure human skin temperature as a technical measure within the scope of occupational risk prevention.

The terminals do not store any data. These contactless systems can detect skin temperature and whether a person is wearing a mask, without retaining the data. If abnormal temperature levels are detected, an alert is sent, enabling healthcare personnel to conduct further examinations.
03-8070 9933     |     Email     |     |     Interest Form