Processes biometric data, in Bermuda

Personal Information Protection Act 2016 (Bermuda), 2016:43, Parts 1-2 (application, exclusions and general principles) · Read the law's page

• Use personal information only for the specific purposes it was collected for, in a fair and lawful manner, and adopt measures and policies giving effect to these obligations.
• Obtain verifiable consent from a parent or guardian before relying on consent to use a child's personal information in a service targeted at children or known to be used by a child.
• Do not use sensitive personal information, which includes biometric information and genetic information, to discriminate against any person contrary to Part II of the Human Rights Act 1981 unless there is lawful authority.

Personal Information Protection Act 2016 (Bermuda), 2016:43, s. 7 (sensitive personal information) · Read the law's page

• Do not use sensitive personal information, meaning personal information relating to an individual's place of origin, race, colour, national or ethnic origin, sex, sexual orientation, sexual life, marital status, physical or mental disability, physical or mental health, family status, religious beliefs, political opinions, trade union membership, biometric information or genetic information, to discriminate against any person contrary to Part II of the Human Rights Act 1981 without lawful authority.
• Use sensitive personal information for such a purpose only with the individual's consent, under an order of the court or the Commissioner, for criminal or civil proceedings, in recruitment or employment where the nature of the role justifies it, or for the purposes of the Beneficial Ownership Act 2025.
• Do not rely on the section 6(1)(b) condition, which turns on what a reasonable person would consider, to use sensitive personal information.