Speaking Engagement

IAPP Brussels 2022

Behavioural biometrics: a clash between privacy and security?

16 Nov 2022 02:00 p.m. - 03:00 p.m.

Banks are increasingly moving away from static biometric identifiers, towards solutions based on behavioural biometrics (such as key stroke patterns, left/right handed, use of short cuts (Ctrl+C), angle the device is held). The behavioural biometric solutions show better prevention of various forms of online fraud. Static and behavioural biometric solutions are both allowed under PSD2, but also both raise privacy issues and are subject to debate. The ICO considered the use of behavioural biometrics for PSD2 checks allowed under the UK Data Protection Act, as this use can be considered a substantial public interest, when implemented correctly. But when can behavioural metrics be considered to be ‘implemented correctly’?

What you will learn:

  • How behavioural biometric solutions work
  • How they are different from biological biometrics and the pros and cons
  • The role behavioural biometrics play in the financial industry
  • How behavioural biometrics can be implemented with privacy-by-design


The session will be moderated by Lokke Moerel, Senior Of Counsel, Morrison & Foerster; Professor, Global ICT Law, Tilburg University

Other panelists include:

  • Wojciech Wiewiórowski, European Data Protection Supervisor
  • Stephen Bonner, CIPP/E, CIPM, Executive Director Regulatory Futures and Innovation, Information Commissioner's Office
  • Wim Mijs, CEO, European Banking Federation
  • Suzanne Rodway, CIPP/E, General Counsel, Group DPO, NatWest Group



Unsolicited e-mails and information sent to Morrison & Foerster will not be considered confidential, may be disclosed to others pursuant to our Privacy Policy, may not receive a response, and do not create an attorney-client relationship with Morrison & Foerster. If you are not already a client of Morrison & Foerster, do not include any confidential information in this message. Also, please note that our attorneys do not seek to practice law in any jurisdiction in which they are not properly authorized to do so.