Biometric identification (Russian market)

Unified Biometric System (UBS)

• Main article: Unified Biometric System (EBS)
• VTB Biometric System

Commercial biometric systems in Russia

Main article: Commercial biometric systems in Russia

2024: Ministry of Justice of the Russian Federation to collect biometrics of convicts without their consent

In October 2024, it became known that the Russian Ministry of Justice had developed draft amendments to the legislation providing for the processing of biometric data of convicts, suspects and accused without obtaining their consent. The initiative is aimed at creating a single protected information space of the Federal Penitentiary Service (FSIN).

According to Vedomosti, the bill proposes to amend the Penal Code and a number of other laws regulating the activities of the penal system. Innovations will allow processing the physiological and biological characteristics of prisoners to establish their identity in automatic mode.

𝓲

Freepik

Andrey Tuzov, managing partner of the Teza law firm, explained that these measures are necessary for keeping forensic records and exchanging information within the framework of international treaties. Biometric data collection is also important for security in places of detention.

Former investigator, lawyer Alexander Burchuk noted that the initiative primarily concerns the use of genetic expertise and the operation of the automated fingerprint information system ADIS "Papilon." These tools allow you to solve crimes of past years.

Julius Tai, senior partner of the Bartolius Law Office, expressed concern about a unified approach to suspects and convicts, given the difference in their legal status. He drew special attention to the need to protect the collected data from unauthorized access.

The project is being implemented within the framework of the concept of the development of the penal system until 2030 and is part of the FSIN digital transformation program. The use of biometric data is considered as one of the promising areas for the modernization of the penitentiary system.^[1]

2023: The Russian government has created a council on biometric identification technologies. List of members

Prime Minister Mikhail Mishustin signed a decree on the creation of the Coordination Council for the Development of Digital Identification and Authentication Technologies based on biometric personal data. The corresponding document was published on December 1, 2023. Read more here.

2022: Russia banned from forcibly collecting biometrics

On July 6, 2022, the State Duma in the third (final) reading adopted amendments to the law "On Personal Data," developed by a group of deputies headed by the head of the State Duma Committee on Information Policy Alexander Khinshtein. One of the initiatives involves a ban on the forced collection and processing of biometric data.

As explained to Kommersant, the head of the Institute for Internet Research Karen Ghazaryan by amendment introduces a ban on coercion to hand over biometric data, if this is not required by the direct provision of services (for example, remote banking) or the norms of other laws. According to Ghazaryan, in practice, this new norm does not change anything and "rather has the nature of a statement to reassure citizens."

In Russia, banned forcibly collect biometrics

According to the head of the intellectual property practice of the DRC law firm Vladimir Ozhereliev, formally, the operators could not have previously forced the subjects to provide consents to the processing of personal data or to conclude contracts under which they are processed. This amendment may make it difficult to mislead citizens about the fact that the surrender of biometrics is mandatory for concluding an agreement with the operator, he said.

The publication writes that, in accordance with the new amendment, business will not be able to refuse service if the client does not want to hand over biometric data, but there are exceptions for cases that are provided for both by the current (by July 7, 2022) version of the law on personal data and other laws. For example, the law on personal data spelled out the possibility of compulsory collection of biometrics from the military, conscripts subject to deportation, convicted and some civil servants, the publication says.^[2]

2021

To collect biometrics, companies will need to undergo state accreditation

On October 25, 2021 there was information that the companies owning information systems which provide identification and authentication with use of biometrics and also render services in identification by means of biometrics, will be obliged to undergo state accreditation. Responsible or­ga­nom naz­na­cheno Min­tsifry of the Russian Federation.

Decree of the Government of the Russian Federation No. 1799 "On accreditation of organizations that own information systems that provide identification and (or) authentication using biometric personal data of individuals, and (or) providing identification and/or authentication services using biometric personal data of individuals "was adopted on October 20, 2021^[3] "

The resolution comes into force on January 1, 2022 and is valid until January 1, 2028. According to the document, accreditation of organizations will begin on March 1, 2022.

The Ministry of Digital Development explained that accreditation of organizations is carried out in order to determine the ability of the organization to provide identification and authentication services for individuals in accordance with the requirements of regulatory legal acts.

"When verifying information about the organization, issues of information security, the state of the technical infrastructure, the availability of appropriate cryptographic means, specialized employees and other important aspects of identification and authentication activities are considered. Without the introduction of mechanisms for regulating the biometric technology market in terms of the parameters set out in this act, there is a high risk of large-scale leaks of biometric personal data, violation of the integrity (substitution, deletion) of biometric personal data, violation of their confidentiality, as well as the introduction of fictitious biometric personal data during processing, including their collection, "the Ministry of Digital Development said.

For accreditation, organizations must submit to the authorized federal body an application for accreditation with the attachment of documents confirming the fulfillment of the requirements for accreditation. The rules list the documents that need to be attached to the application.

"If the organization does not comply with these requirements, accreditation will be revoked or suspended until violations are corrected. For the illegal collection, processing and storage of biometric personal data, responsibility is provided in accordance with the legislation of the Russian Federation, "the press service of the ministry recalled.

The Rules also list cases of termination of accreditation of accredited organizations. Ministry of Digital Development, according to preliminary calculations, predicts the submission of applications for accreditation of up to 1300 organizations. At the same time, work on the assessment of organizations that plan to apply for accreditation is still ongoing, the department said.

According to the Rules, the confirmation of the accredited organization of accreditation is the corresponding entry in the list of accredited organizations.^[4]

Mishustin signed a regulation on the state control of the turnover of personal and biometric data

In October 2021, Prime Minister Mikhail Mishustin signed a decree of the Government of the Russian Federation on state control over the turnover of personal and biometric data. The document, published on the official Internet portal of legal information, will enter into force on January 1, 2022.

Mikhail Mishustin signed a regulation on the state control of the turnover of personal and biometric data

According to the approved regulation on federal state control in the field of identification and authentication, accredited organizations carrying out identification will be divided into gravity groups ("A," "B," "C"), taking into account the consequences in case of non-compliance with the requirements of the legislation:

• category A (high severity) objects of control, carrying out activities to identify (authenticate) people using personal personal data or providing services in this area;
• category B (medium) includes objects that use personal biometric data to perform only authentication, or provide services in this area;
• category C (low) includes objects that use biometrics for authentication in access control systems - for entering and exiting a protected area.

Depending on the assigned category, this or that level of state control will be carried out. This duty is assigned to the Ministry of Digital Development of the Russian Federation.

Earlier in 2021, a law came into force aimed at a comprehensive settlement of issues related to the functioning of systems that ensure identification using biometric personal data.

One of the points of the law - identification and authentication using biometric personal data of individuals is allowed only for organizations that meet the established requirements. To ensure the compliance of organizations with such requirements, accreditation is introduced, which will be carried out by the federal executive body that regulates the identification of citizens of the Russian Federation on the basis of biometric personal data.^[5]"

Projects for the introduction of biometrics at airports were not launched due to lack of regulatory regulation

Airports "Sheremetyevo," "Domodedovo," "Tolmachevo" and "Pulkovo" in September 2021 did not launch the identification of passengers by biometrics. This became known on October 8, 2021.

The delay is caused by a legal vacuum. Industry representatives believe that for the full launch of the project, it is necessary to amend the order of the Ministry of Transport "On approval of the rules for pre-flight and post-flight inspections." The document must include a provision on the possibility of biometric identity identification and inspection. In addition, it is necessary to adopt amendments to the 16-FZ "On Transport Security."

For October 2021, Ministry of Digital Development is studying airport infrastructure to determine how a biometrics solution can be integrated.

Earlier it was reported about testing the biometric identification of passengers at Sheremetyevo, in 2019 an intelligent facial recognition system was launched at Domodedovo.

The source recalled that the Digital Transformation Program of the Transport Industry contains a provision that by 2023 6% of Russian airports should use biometric systems to identify passengers^[6].

Approval of requirements for the business reputation of the organization-owner of the biometric identification IT system

The Ministry of Digital Development, Communications and Mass Media of the Russian Federation approved the requirements for the business reputation of heads of organizations that carry out identification using biometric personal data. The corresponding order of the department was published on the official Internet portal of legal information on September 17, 2021. The document will enter into force on March 1, 2022 and will be valid for six years.

The Ministry of Digital Development Science has published requirements for the business reputation of the organization-owner of the IT biometric identification system

The document establishes the following requirements for the sole executive body or a member of the collegial executive body of an organization that owns an IT system that provides identification or authentication using biometric personal data of individuals during accreditation:

• the absence of a member of the collegial executive body of the organization on the day of submission of documents for accreditation of the organization of an outstanding or outstanding criminal record for the commission of a crime;
• the absence of the fact of termination of the employment contract with a person at the initiative of the employer on such grounds as disclosure of legally protected secrets (state, commercial, official and other), which became known to the employee in connection with the performance of his labor duties, including the disclosure of the personal data of another employee, the employee's failure to take measures to prevent or resolve a conflict of interest to which he is a party - if on the day preceding the day of submission of documents for accreditation of the organization, the three-year period has not expired from the date of termination of such an employment contract;
• the absence of the fact that a person committed such administrative offenses as an official of business activities without special permission (license) within one year preceding the day of submission of documents for accreditation of the organization, if such permission (such license) is mandatory (mandatory), illegal activities in the field of information protection;
• absence of the fact of repeated (two or more times) commission by a person within three years preceding the day of submission of documents for accreditation of the organization, administrative offense in the field of personal data.^[7][8]

Mandatory fingerprinting of migrants introduced in Russia

In mid-June 2021, the State Duma adopted in the third (final) reading a law on the mandatory fingerprinting of migrants arriving in Russia in a visa-free manner.

The bill provides for a single passage of mandatory fingerprint registration, photographing and subsequent biometric identification, as well as a medical examination of foreign citizens (for the absence of drug addiction diseases, diseases caused by HIV, infectious diseases that pose a danger to others) who arrived in the Russian Federation in a manner that does not require a visa, and are in Russia for more than 90 days in total during the calendar year.

The State Duma introduced fingerprint registration of labor migrants

Citizens of the countries of the Eurasian Economic Union: Armenia, Belarus, Kazakhstan and Kyrgyzstan will have to undergo fingerprinting.

At the same time, for foreign citizens who arrived in the Russian Federation in order to carry out labor activities, it is proposed to establish the obligation to undergo these procedures within 30 calendar days from the date of entry into Russia.

According to the authors of the law, it will increase the level of sanitary and epidemiological safety, and will also contribute to the detection of crimes.

The fragmentation of control over the state of health of migrants and the lack of effective algorithms for actions against persons in whom dangerous diseases are detected significantly increase the risk of penetration and spread of dangerous infectious diseases on the territory of the Russian Federation  , the materials for the draft law say.

By mid-June 2021, there are a number of categories of foreign citizens who can stay in the Russian Federation for a long time without undergoing fingerprint registration and medical examination. The largest part of them are citizens of the member countries of the Eurasian Economic Union (EAEU), of which there were about 2.5 million people in Russia as of March 1, 2020.^[9]

2020: Bank of Russia Data

2018

Demand for smartphones with biometrics increased by 40% in money

60% of those acquired in 2018, smartphones that is, about 18 million units, have the opportunity. biometric authentications Such data was published on January 23, 2019 by the "-" group. M.VideoDorado Unique biometric images for each owner provide easier and safer access to unlock, information and commit. contactless payments

The cost of a device with the ability to unlock using a fingerprint starts at 5 thousand, and the rubles average cost of smartphones with biometrics for the year decreased by 10% to 22 thousand rubles. At the same time, the demand for smartphones technology in 2018 compared to 2017 increased by more than 1.5 times in units and by 40% in money. At the end of 2019, the number of smartphones sold with the possibility of biometric authentication will exceed 90%, predicted in M.Video"-."Dorado

People are increasingly trusting the smartphone - from everyday communication and social networks to payments and storage of personal information, and manufacturers are optimizing security systems. The fingerprint is more convenient and safer than the password, and this functionality appears even in budget models. Biometric technologies are already actively used in the field of public services, security and finance, and with the spread of mobile devices, the areas of application will become even more, "said Vladimir Chaika, head of the Mobile Technology department in the M.Video-Eldorado group.

According to M.Video-Eldorado, 90% of biometric smartphones have dactyloscopic scanner separately or in combination with other technologies. The solution is found both in premium models and in smartphones up to 10 thousand rubles. Manufacturers are increasingly placing a sensor on the back of the device or integrating directly into the screen to optimize space. Face recognition is used in 37% of biometric smartphones, about 5% can recognize the owner from the iris of the eyes.

At the end of 2018, in terms of the number of devices sold, the most popular biometric models were Honor 9 Lite with a fingerprint scanner recognitions and face function, as well as from iPhone SE Apple with an integrated Touch ID fingerprint recognition scanner.

In addition, biometric characteristics are used to unlock devices, applications or confirm payment transactions faster and more securely if there is a contactless data transfer (NFC) module. So, in 2018, the share of smartphones with technology support for contactless payment amounted to 40%, which corresponds to about 12 million devices, and reached 70% in money, the company noted.

Market growth of 35.74% per annum  - J'son & Partners Consulting

In January 2019, the analytical company J’son & Partners Consulting presented the results of a study of the Russian biometric technology market. Its volume over the past four years (2015-2018) has increased by about 35.74% annually.

The Russian biometrics market differs from the world market in its structure: if in the first there is active penetration, facial recognition systems then on a global scale developments in the field of fingerprint identification dominate. By the end of 2018, the share of face recognition technologies in the total volume of the Russian biometric market amounted to almost 50%, and for four years this segment showed growth at the level of 106.7% per year.

The Russian biometric market is growing by 36% per year thanks to facial recognition systems

Experts attribute the growing demand for facial biometrics to a technological breakthrough in the field, machine learning which ensured the diffusion of products into the still unsaturated Russian market. In addition, the emergence of Russian startups with world-class face identification algorithms has aroused high interest in the latter from large investors, as a result of which it is Facial Recognition technology that receives Russia significant support from the outside (states including at the legislative level).

As for the fingerprint recognition category, it continues to dominate only in the areas of forensics and MCDS (access control and control systems, registration of entry into and exit from objects in a given territory). Analysts attribute interest primarily to lower cost. In the total volume of the Russian biometric market for the period under study, the share of the fingerprint technology segment has more than halved.

The report also notes more than 46 percent annual growth in the segment of biometric technologies for recognizing people by vein pattern between 2015 and 2018. The share of this segment in the total volume of the Russian biometric market is four times higher than the global figure.

2014: BioLink Solutions: Market size to reach $110 million in 2015

According to BioLink Solutions, the trends in the development of Russian biometrics are compared with global trends; the segmentation of the domestic biometric market was analyzed and the main quantitative indicators characterizing its evolution in the next five years are given. A 2014 study made it possible to formulate the following conclusions:

• in 2015, the volume of the Russian biometric market will reach $110 million;
• average annual growth rates of the industry market, calculated in complex percentages, in 2015-2019. will amount to 15%;
• in 2019, the market volume will exceed $300 million.

See also

• Information Security - Biometric Identification - Catalog of Projects and Systems
• Information security in banks
• National Biometric Platform (NBP)
• Biometric Market Today
• Biometric Identification (Global Market)
• Biometric identification technologies
• Biometrics myths
• A brief history of biometrics
• Biometrics and Border Control
• ACS
• Biometric Time and Attendance Systems
• Video surveillance systems
• Authentication systems

Notes