Definition
Biometric data (face, voice, gait, fingerprint, micro-expression) collected, stored, or sold without informed consent in jurisdictions where legally required.Distinct from
- GER-322 — Biometric data collected without consent at input → this code. Output authenticity missing at runtime → GER-322.
Documented case
Facebook’s "Tag Suggestions" Allegedly Stored Biometric Data without User Consent
AIID #122
Tags
gdpr · privacy-violation