Privacy & Data Protection
Biometric data
Biometric data measures unique physical traits — faces, voices, fingerprints. AI tools that clone voices or generate avatars process it, triggering the strictest consent rules.
Biometric data captures measurable biological characteristics that identify a person: facial geometry, voiceprints, fingerprints, gait. Because it is permanent — you cannot rotate your face like a password — privacy regimes give it special status: GDPR's special categories, Québec's Law 25 biometric provisions, Illinois' BIPA.
Generative AI quietly became a biometric processor: voice cloning builds voiceprints, avatar platforms model faces, meeting tools store voice recordings. Enrollment consent, retention limits, and deletion on offboarding are the obligations to have answered before the first clone or avatar exists.
Where this shows up
Related terms
See it in your own organization.
Sanitized AI inventories the AI tools in use and redacts sensitive data from prompts before it leaves.