Biometric Authentication in the Digital Age

Abstract

The increased use of biometric traits to digitally authenticate people has the potential to conveniently and accurately grant or deny individual access to information and services. Unlike passwords or smart cards that are also used to authenticate a user, biometrics are not replaceable if lost or stolen—yet there are no universal rights protecting people against unauthorized use of their biometrics. Moreover, there are no clear accommodation rights for users who might not be able to provide some biometrics, for example due to cultural reasons or because of a disability. If users cannot be guaranteed the recovery of stolen biometrics, do people have a right to only provide those biometrics that cannot be stolen? While biometric technology by itself does not raise intrinsic ethical issues, the authors identify a number of extrinsic ethical arguments about the ethical status of applications of this technology and its consequences, namely, those that are linked to distributive justice issues and risk. They explore some of these concerns and discuss strategies to mitigate them within the context of balancing the rights of individuals and the need to ensure collective security.