Canada issues updated guidance on the use of biometric technologies
The Privacy Commissioner of Canada has released updated guidance for public and private sector organisations on the responsible use of biometric technologies, following an extensive consultation process.
On 11 August 2025, the Office of the Privacy Commissioner of Canada (OPC) published new guidelines addressing privacy considerations in the collection, use, and disclosure of biometric information, such as facial recognition and fingerprint scanning. The guidance aims to help organisations balance the benefits of biometrics for identity verification and service delivery with the need to protect individuals’ privacy.
Biometric information, unique physical or behavioural characteristics used for identification, can improve security and streamline access to services. However, because it is closely tied to an individual’s identity and rarely changes over time, it can also reveal sensitive details, including health information or characteristics related to race and gender. This makes its handling particularly sensitive from a privacy perspective.
The guidance outlines measures organisations should take when adopting biometric systems, including ensuring there is a clear and appropriate purpose for their use, assessing proportionality between benefits and privacy risks, and implementing robust safeguards for data accuracy, transparency, and consent. It also includes sector-specific advice for both federal institutions and businesses, with considerations for lawful authority, technical testing, and impact assessments.
The updated guidelines follow a public consultation held between November 2023 and February 2024, during which the OPC received 34 written submissions and met with 31 organisations. Feedback came from academia, civil society, business, legal associations, public institutions, and individual members of the public. As a result, the final document includes clearer definitions, closer alignment with legal requirements, more detailed technical explanations, revised consent guidance for the private sector, and reorganised impact assessment advice for the public sector.
Privacy Commissioner Philippe Dufresne emphasised the importance of integrating privacy protections at the outset of any biometric initiative, noting that such an approach supports innovation while safeguarding rights.
Why does it matter?
The updated guidance reflects Canada’s effort to keep pace with the growing use of biometric technologies and the complex privacy issues they raise. By clarifying expectations for lawful, transparent, and proportionate use, the OPC aims to ensure that biometric systems are implemented in a way that both protects individuals and maintains public trust.
