Processes biometric data, in Andorra

Llei 29/2021, arts. 8-10 (special categories, children and criminal-offence data) · Read the law's page

• Do not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs or trade union affiliation, or process genetic data, biometric data used to uniquely identify a person, health data, or data about sex life or sexual orientation, unless a listed Article 9(2) exception applies, most commonly the data subject's explicit consent.
• Confine any processing of personal data about a person's criminal convictions or offences, or related security measures, to what is strictly necessary and authorised by law or supervised by a public authority with adequate safeguards.
• Treat sixteen as the age at which a minor may consent to an information-society service directly, and obtain or verify consent or authorisation from a legal representative below that age, using available technology to confirm it.
• Treat an identifier your system derives from a photograph of a person in Andorra, such as a faceprint, as covered biometric data under Article 4(17); the definition names facial images, dactyloscopic data and iris patterns as examples and excludes nothing that is recording-derived.