Biometrics, Identity Sciences and BIPA Expert Analysis

Fingerprint, Face and Voice Data Traced From Scanner to Database

A biometric privacy claim or a breach of a template database comes down to one question: where did the fingerprint, face or voice data actually go? Global Digital Forensics examines the scanners, the applications behind them and the databases they feed, and answers that question from the system records rather than the vendor brochure.

Fingerprint reference cards beside a livescan platen.

Why Biometric Privacy Disputes Come to GDF

Biometric systems promise certainty and deliver records, and the records are what end up in dispute. Global Digital Forensics, a practice founded in 1992, examines the systems behind the evidence, and our biometrics and identity sciences practice applies that discipline to fingerprint, facial, voice, iris and retinal technologies. We identify the sensor, the algorithm and its version, the enrollment and comparison stages, the liveness controls, the retained records and every access or export path, because the label on a scanner says almost nothing about what the implementation keeps.

The examiners who do this work testify to it. In Rogers v. BNSF Railway, the first BIPA class action to reach a jury trial, plaintiffs' counsel retained Global Digital Forensics as database, data analysis and computer forensics experts. The work restored and analyzed the database records behind an identity verification system at Illinois rail facilities, normalized and deduplicated them, and established the population of individuals those records reflected.

The statutory and technical background for this work comes from the Illinois Biometric Information Privacy Act, 740 ILCS 14 and the NIST Face Technology Evaluations (FRTE and FATE) program.

If a BIPA complaint or a breach notice has put your biometric system in question, get a free consultation and a senior examiner will tell you which records to preserve first.

Who needs a biometric system examination

  • Litigation counsel in biometric privacy matters
  • Government agencies
  • Financial institutions deploying biometric authentication
  • Insurers evaluating biometric claims
  • Corporate security teams

From Scanner to Stored Identity Record

A fingerprint reader produces an image, software turns that image into a template, an application attaches the template to an identity and a database stores some or all of it, often in more than one place. We examine each of those steps in fingerprint, facial and retinal systems and keep source images and recordings distinct from derived templates, identifiers and match results, because the implementation decides what was actually handled.

We follow the data between devices, applications, programming interfaces, vendors and storage. Configuration, source code, database records and logs show whether information stays on a device, travels elsewhere, is linked to a named person or survives after an account is closed. Scope is set by the access the client can authorize and the records that still exist, which is why preservation comes first.

Call (800) 868-8189 to talk it through with an examiner, or send the details.

How Templates, Images and Databases Were Protected or Exposed

A fingerprint cannot be reissued the way a password can, so the controls around it carry more weight. We examine access controls, administrative privileges, encryption, application interfaces and the retention and deletion behavior around biometric data, show how a weakness could expose templates, images or linked identity records, and analyze the evidence of unauthorized access or transfer.

Theft of biometric data creates real identity risk, yet possession of a template does not open every system that uses the same kind of biometric. We examine the specific format, implementation and protections before reaching a conclusion about reuse, impersonation or compromise, so the board or the court hears the risk that actually exists. A security leader who suspects a template database has been reached can call (800) 868-8189 at any hour, and the work begins by preserving the access records that expire first.

Rogers v. BNSF Railway and the Population Behind the Records

Rogers v. BNSF Railway concerned fingerprint information registered through identity verification systems at Illinois rail facilities. The case needed a count of people rather than rows, and a clear account of how the templates, identifiers and images in the restored database related to one another. That is the core of this practice: turning raw system records into a defensible statement of who was enrolled, what was kept and where it went.

Microphones and cameras raise the same questions. Analyzing what was said, classifying a caller's intent and identifying who is speaking are different functions, and a system can perform one without the others. We examine what the implementation does, what it retains and whether it links the result to an individual, so the legal team frames the technical question correctly before discovery is served.

Send the question and the sources you know about, and we will map the examination with you.

Technical Evidence and Testimony for BIPA Disputes

We document capture and enrollment, template generation, vendor transfers, retention, deletion and the controls protecting stored information, and we write the report so another qualified examiner can follow it from exhibit to source. The findings map to the technical questions the Illinois Biometric Information Privacy Act and similar state laws raise, and our biometrics expert witness service carries the work into deposition and trial.

What you receive

Your Technical Report and the Record Behind It

The file identifies the systems and records examined, the method, the observations and the reasoning behind each opinion, written for the opposing expert who will try to take it apart.

Every opinion is stated at the strength the records support, so it holds its ground at deposition.

  • Scope letter and stated assumptionsThe scope letter records the question, the systems and material examined, the exclusions and the assumptions the client supplied, so the opinion has a boundary.
  • Evidence handling recordThe handling record documents acquisition details, hash values, storage, transfer and custody for each database, export and device.
  • Methodology statementThe methodology statement identifies tools, versions, queries and deduplication rules so another qualified examiner can repeat the work.
  • Findings, separated from interpretationFindings distinguish what the records show from what we infer, and identify the basis for each conclusion.
  • Gaps and the work that closes themThe report lists any material that was unavailable and the further work that would close each gap, so nothing surfaces for the first time at deposition.
  • Exhibits and supporting materialData flow diagrams, population schedules and timelines become exhibits suitable for a filing, a hearing or a board presentation.
  • System examination documentationReference material and system analysis notes preserve the reasoning behind each conclusion for the expert disclosure and for cross examination.

How We Examine Biometric Data Handling

  1. Capture

    We identify the sensors, applications, accounts and source records that define the system and the evidence available for examination.

  2. Trace

    We follow images, templates and identity data between components to establish transformation, storage and sharing.

  3. Assess

    We examine access, storage and security controls to establish who could reach the data and how it was protected.

  4. Explain

    We document findings, supporting records and source limits so privacy, legal and business leaders can act on the technical account.

If the system is live and templates are still being written, call (800) 868-8189 and we will say what to preserve before the retention schedule runs.

Frequently asked

Images, Templates and Voice Processing

What is the difference between an image and a biometric template?

A source image or recording is the raw capture, while a template is a derived mathematical representation used for comparison. They are different records with different risks, and whether a system keeps one, both or neither is a question we answer from the system itself.

Does voice processing always identify a speaker?

No. Analyzing what was said, classifying a caller's intent and identifying who is speaking are three different functions, and a system may perform one without the others. We examine what the implementation does and retains before anyone concludes that a biometric identifier was created.

Can stolen biometric data compromise an identity?

It can create identity risk, and a fingerprint cannot be changed the way a password can. Whether a stolen template or image can be reused depends on its format, the implementation that produced it and the protections of the system someone would try to use it against, which is exactly what our examination establishes.

Free consultation

Describe the Biometric System and the Claim

On the first call a senior examiner hears how the scanners, applications and databases fit together, names the records to preserve before retention schedules run, and outlines the examination, the population analysis and the report.

A hotline answered 24/7 by examiners who testify.

Or call (800) 868-8189

Email or phone is required. For an active incident, please call. Read what we send with the request.

Find the Expert Witness Service for Your Matter

When the evidence calls for testimony rather than an internal finding, our biometrics expert witness and privacy expert witness services carry the work into deposition and trial.

GDF does not accept pro se litigation cases, and GDF may decline matrimonial or family law cases at our discretion.

Reviewed by Joseph Caruso, Founder, CEO and CTO, CISSP. Last reviewed .

Privacy center

Choose your site settings

Optional technology stays off until you choose otherwise. You can change these browser settings at any time. Access to the core site does not depend on optional technologies.

Technology preferences
Sale or cross-context sharing: not used GDF does not sell or share website personal information for cross-context behavioral advertising.