General Regulation For The Processing Of Biometric Data, Resolution No. SPDP-SPD-2026-0039-R

On September 9, 2026, the Superintendence of Personal Data Protection (“SPDP”) issued, through Resolution No. SPDP-SPD-2026-0039-R, the General Regulation for the Processing of Biometric Data (“Biometric Data Regulation”), aimed at regulating the conditions, safeguards, and limitations applicable to the processing of biometric data and establishing specific rules to guarantee the rights and freedoms of data subjects.

The Biometric Data Regulation applies to the processing of biometric data for identification purposes carried out by data controllers and processors in the public and private sectors subject to the Organic Law on Personal Data Protection (“LOPDP”), through automated, partially automated, or non-automated procedures when the data forms part of systems, electronic media, or structured databases.