Langham Walsh

ICO consultation on the draft biometric data guidance

Talk to an expert

The Information Commissioner's Office (ICO) has produced guidance on biometric data and biometric technologies.


The draft guidance looks at the definition of biometric data under the UK General Data Protection Regulation (UK GDPR) and how data protection law applies when using biometric recognition systems.


Biometric recognition systems are tools used by businesses to verify customers' identity in the digital world. For example, facial recognition technology, voice recognition, fingerprint scanning, etc.
The ICO's draft guidance covers:

  • what biometric data is;
  • when it is considered special category data;
  • its use in biometric recognition systems; and
  • the data protection requirements you need to comply with.
    This guidance is for organisations that use or are considering using biometric recognition systems. It is also for vendors of these systems. The aim of the guide is to help businesses and organisations understand the law and the ICO's recommendations for good practice.
    See: [Guidance on biometric data | ICO](https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/guidance-on-biometric-data/)
April 9, 2026
Should You Incorporate Your Business?

If you have been running a business for a while, maybe as a sole trader or in a partnership, you may have heard someone say, “You should incorporate”.

Read article
April 8, 2026
Is Vibe Coding the Future?

The National Cyber Security Centre (NCSC) has published a blog post exploring the potential for ‘vibe coding’ replacing the Software-as-a-Service (SaaS) business model. While not suggesting that vibe coding is ready to take over now, they conclude that vibe coding is following a pattern similar to cloud adoption 20 years ago.

Read article