ISO/IEC TR 24714-1:2008

Information technology — Biometrics — Jurisdictional and societal considerations for commercial applications — Part 1: General guidance

Apstrakt

ISO/IEC TR 24714-1:2008 gives guidelines for the stages in the life cycle of a system's biometric and associated elements. This covers the following:

the capture and design of initial requirements, including legal frameworks;
development and deployment;
operations, including enrolment and subsequent usage;
interrelationships with other systems;
related data storage and security of data;
data updates and maintenance;
training and awareness;
system evaluation and audit;
controlled system expiration.

The areas addressed are limited to the design and implementation of biometric technologies with respect to the following:

legal and societal constraints on the use of biometric data;
accessibility for the widest population;
health and safety, addressing the concerns of users regarding direct potential hazards as well as the possibility of the misuse of inferred data from biometric information.

The intended audiences for ISO/IEC TR 24714-1:2008 are planners, implementers and system operators of biometric systems.