In his opinion, the rules described in the document,
Posted: Sun Jan 26, 2025 8:24 am
According to him, the main message of the bill is that it is forbidden to store photographs, video or audio recordings used for personal identification purposes in a bank. "Thus, the changes being made significantly change the interaction of those banks with clients or personnel that used their own biometric systems. For other banks, there will be no need to change business processes, since they generally do not exist. They will simply need to be built in accordance with the law," explains Andrey Fedorets.
In his opinion, the usa cell phone number list requirement not to store biometric samples in the organization is correct. "We all see that the number of personal data leaks is increasing. Therefore, the possibility of losing such sensitive data as biometrics is akin to a catastrophe. The other requirements are also quite reasonable - do not force to submit biometrics, do not impose it as a service. The problem may be the curtailment of the organizations' own biometric systems. Quite a lot of effort and money has been invested in such projects. It is difficult to say how quickly to rebuild them. After all, even the access control and management system now falls under legislative requirements," says Andrey Fedorets.
according to which the processing of EBS vectors must be carried out using information technologies and technical means that have received confirmation from the Ministry of Digital Development of their compliance with the requirements, will lead to an increase in the cost of solutions. "But this is fair. Bringing some information system to the requirements for highly protected, high-precision systems is not a free performance. This is a year and a half of work for the production team, costs for audits, testing, compliance assessments, etc.", he noted.
In his opinion, the complexity and cost of implementation may become a problem. "The cost of obtaining identity verification through biometric systems at the moment almost completely repels potential partners from integrating and using such systems. The cost of a commercial SMS used to send a confirmation code is 3-4 rubles. Solutions based on an authenticator application are cheaper. At the same time, the cost of authentication using biometrics, declared for banks, is about 200 rubles. And this is not a subscription for a year, but a one-time payment," the expert explains.
In his opinion, the most logical thing at the moment is to use smart cards, which should be available to the entire population. "This could be an "electronic passport", "electronic driver's license" or something else. The second factor in such an authentication scheme can be discussed. But again, biometrics does not look like a preferable option for mass use for user authentication," he is sure.
In his opinion, the usa cell phone number list requirement not to store biometric samples in the organization is correct. "We all see that the number of personal data leaks is increasing. Therefore, the possibility of losing such sensitive data as biometrics is akin to a catastrophe. The other requirements are also quite reasonable - do not force to submit biometrics, do not impose it as a service. The problem may be the curtailment of the organizations' own biometric systems. Quite a lot of effort and money has been invested in such projects. It is difficult to say how quickly to rebuild them. After all, even the access control and management system now falls under legislative requirements," says Andrey Fedorets.
according to which the processing of EBS vectors must be carried out using information technologies and technical means that have received confirmation from the Ministry of Digital Development of their compliance with the requirements, will lead to an increase in the cost of solutions. "But this is fair. Bringing some information system to the requirements for highly protected, high-precision systems is not a free performance. This is a year and a half of work for the production team, costs for audits, testing, compliance assessments, etc.", he noted.
In his opinion, the complexity and cost of implementation may become a problem. "The cost of obtaining identity verification through biometric systems at the moment almost completely repels potential partners from integrating and using such systems. The cost of a commercial SMS used to send a confirmation code is 3-4 rubles. Solutions based on an authenticator application are cheaper. At the same time, the cost of authentication using biometrics, declared for banks, is about 200 rubles. And this is not a subscription for a year, but a one-time payment," the expert explains.
In his opinion, the most logical thing at the moment is to use smart cards, which should be available to the entire population. "This could be an "electronic passport", "electronic driver's license" or something else. The second factor in such an authentication scheme can be discussed. But again, biometrics does not look like a preferable option for mass use for user authentication," he is sure.