24/05/2024 (Agence Europe) – In an opinion issued on Friday 24 May, the European Data Protection Board (EDPB) considers that certain security practices at European airports do not comply with the GDPR. Following a request from the French Data Protection Authority (CNIL), the EDPB has stated that certain practices relating to facial recognition of travellers to reduce the time spent on identity checks can only comply with the GDPR under certain conditions. It’s all a question of how the recovered data is stored: “The only solutions that could be compatible are those in which the biometric data is in the hands of the individual or stored in a central database for which he or she alone has the encryption key”, according to the EDPB. (IS)