Strengthening the security of identity cards of Union citizens and of residence documents issued to Union citizens and their family members exercising their right of free movement
This law updates security standards for identity cards and residence documents for EU citizens and their families. It aims to enhance the trustworthiness and security of these essential documents used for free movement within the EU. The rules affect EU citizens, their non-EU family members who hold residence documents, and the national authorities responsible for issuing these documents. It also impacts private entities that may need to verify identities using these documents. Key changes include stricter rules on storing and accessing biometric data like facial images and fingerprints. The law clarifies that gender information on documents is optional for member states and specifies how it should be recorded if included. Member states must ensure that procedures for collecting biometric data respect individual dignity, with special attention to children and vulnerable persons. The Commission will report on the implementation and impact of these rules after two and eleven years.
Analysis
The Regulation does not provide a legal basis for setting up or maintaining national or Union-level databases for storing biometric data.
What changes
- Recital 19 is amended to explicitly mention the European Data Protection Supervisor's opinion regarding the necessity and proportionality test for biometric databases.
- Recital 20 is amended to specify that only duly authorised staff of national authorities, Union agencies, and private entities can access facial images for verification, subject to Union data protection law.
- Article 13 is amended to mandate Commission reports on implementation two and eleven years after entry into force, focusing on fundamental rights and data protection.
Expected impact
- The regulation clarifies that it does not provide a legal basis for national or Union biometric databases, reinforcing that such matters are subject to national law and Union data protection requirements.
- Access to facial images on identity cards and residence documents is restricted to authorised personnel of specific authorities and entities, with adherence to Union data protection law.
- Member States must ensure external service providers comply with data protection laws and implement measures to prevent unauthorized access or misuse of personal data.
Limitations
- The document is a legislative resolution and does not contain the full text of the proposed regulation, limiting the analysis to the provisions and amendments presented.
- Specific technical specifications for biometric data capture, referenced by Commission Implementing Decisions, are not included in this document.
- The document does not detail the specific procedures or training requirements for handling children and vulnerable persons during biometric data collection, beyond stating the need for specific considerations.
Some data sources haven't been updated in over 48 hours.