{"id":858,"date":"2026-07-29T09:00:00","date_gmt":"2026-07-29T08:00:00","guid":{"rendered":"https:\/\/research.reading.ac.uk\/einstein\/?p=858"},"modified":"2026-07-30T17:07:31","modified_gmt":"2026-07-30T16:07:31","slug":"privacy-at-the-border-can-security-and-data-protection-coexist","status":"publish","type":"post","link":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/","title":{"rendered":"Privacy at the Border: Can Security and Data Protection Coexist?"},"content":{"rendered":"\r\n<figure class=\"wp-block-image alignwide size-full\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone  wp-image-857\" src=\"https:\/\/research.reading.ac.uk\/einstein\/wp-content\/uploads\/sites\/327\/2026\/05\/img_art13-1-300x132.png\" alt=\"Illustration for: Privacy at the Border: Can Security and Data Protection Coexist?\" width=\"398\" height=\"175\" srcset=\"https:\/\/research.reading.ac.uk\/einstein\/wp-content\/uploads\/sites\/327\/2026\/05\/img_art13-1-300x132.png 300w, https:\/\/research.reading.ac.uk\/einstein\/wp-content\/uploads\/sites\/327\/2026\/05\/img_art13-1.png 680w\" sizes=\"auto, (max-width: 398px) 100vw, 398px\" \/><\/figure>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The deployment of biometric systems at borders involves a fundamental tension. On one side: the security interest in accurately and efficiently identifying individuals, detecting fraud, and enforcing border controls. On the other: the privacy interest in limiting the collection of sensitive personal data, protecting individuals from surveillance, and ensuring that border crossings remain a dignified experience. These interests are not irreconcilable \u2014 but resolving them requires deliberate design choices.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Biometric data: the highest category of protection<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Under the GDPR, biometric data used for the purpose of uniquely identifying a natural person is classified as special category data \u2014 the highest level of protection in EU data protection law. This is appropriate: biometric data is fundamentally different from other personal data in one critical respect \u2014 it cannot be changed. A compromised password can be reset. A compromised biometric cannot.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">Privacy by design in practice<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Privacy by design \u2014 the principle that data protection should be built into a system from its inception \u2014 is now a legal requirement under GDPR Article 25. For biometric systems, this means: collecting only the data strictly necessary for the specific purpose; storing biometric templates rather than raw images where possible; ensuring that data collected for one purpose cannot be repurposed for another; and applying cryptographic protection to stored data.<\/p>\r\n\r\n\r\n\r\n<h2 class=\"wp-block-heading\">The fairness of algorithms<\/h2>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">Biometric algorithms can perform differently across demographic groups. Face recognition accuracy can vary across ethnicities, ages, and genders. PAD systems trained predominantly on one demographic may underperform on others. The EU AI Act&#8217;s requirement that training data for high-risk AI systems be representative of the population the system will encounter is directly relevant here.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\">The EINSTEIN project works with ethics and legal experts from Trilateral Research to conduct ELSI impact assessments, run Living Lab sessions with community representatives, and ensure that privacy and fairness are built into every application from the earliest design stage.<\/p>\r\n\r\n\r\n\r\n<p class=\"wp-block-paragraph\" style=\"font-size: 0.85em;color: #6b7a90;border-top: 1px solid #e2e8f2;padding-top: 1em;margin-top: 2em\">\u00a9 2026 EINSTEIN Consortium. EINSTEIN is funded by the European Union\u2019s Horizon Europe programme (GA\u00a0No.\u00a0101121280) and by UKRI (IFS\u00a010093453). Views expressed are those of the authors only. <a href=\"https:\/\/research.reading.ac.uk\/einstein\/\">www.einstein-horizon.eu<\/a><\/p>\r\n","protected":false},"excerpt":{"rendered":"<p>The deployment of biometric systems at borders involves a fundamental tension. On one side: the security interest in accurately and efficiently identifying individuals, detecting fraud, and enforcing border controls. On the other: the privacy interes&#8230;<\/p>\n","protected":false},"author":909,"featured_media":832,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"__cvm_playback_settings":[],"__cvm_video_id":"","footnotes":""},"categories":[18],"tags":[19,22,78,79,80,77,76],"coauthors":[14],"class_list":["post-858","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-research-blog","tag-biometrics","tag-border-security","tag-data-protection","tag-ethics","tag-fundamental-rights","tag-gdpr","tag-privacy"],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.8.1 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN\" \/>\n<meta property=\"og:description\" content=\"The deployment of biometric systems at borders involves a fundamental tension. On one side: the security interest in accurately and efficiently identifying individuals, detecting fraud, and enforcing border controls. On the other: the privacy interes...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/\" \/>\n<meta property=\"og:site_name\" content=\"EINSTEIN\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-29T08:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-30T16:07:31+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/research.reading.ac.uk\/einstein\/wp-content\/uploads\/sites\/327\/2026\/05\/einstein_blog_banner-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"720\" \/>\n\t<meta property=\"og:image:height\" content=\"405\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"James Ferryman\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"James Ferryman\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/\",\"url\":\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/\",\"name\":\"Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN\",\"isPartOf\":{\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/#website\"},\"datePublished\":\"2026-07-29T08:00:00+00:00\",\"dateModified\":\"2026-07-30T16:07:31+00:00\",\"author\":{\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/287e525ca50fc2213a8cd2ad36fb324f\"},\"breadcrumb\":{\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/research.reading.ac.uk\/einstein\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Privacy at the Border: Can Security and Data Protection Coexist?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/#website\",\"url\":\"https:\/\/research.reading.ac.uk\/einstein\/\",\"name\":\"EINSTEIN\",\"description\":\"IntEroperable applIcations suIte to eNhance European identity and document SecuriTy and fraud dEtectIoN\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/research.reading.ac.uk\/einstein\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/287e525ca50fc2213a8cd2ad36fb324f\",\"name\":\"James Ferryman\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/image\/e455eff97bf15f08533b5794a7ae2be3\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/bb9b6c1740f6a54e1761096e29ce475824a3bb90f2b70ebc385aa96656998cc9?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/bb9b6c1740f6a54e1761096e29ce475824a3bb90f2b70ebc385aa96656998cc9?s=96&d=mm&r=g\",\"caption\":\"James Ferryman\"},\"url\":\"https:\/\/research.reading.ac.uk\/einstein\/author\/sis00jf\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/","og_locale":"en_GB","og_type":"article","og_title":"Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN","og_description":"The deployment of biometric systems at borders involves a fundamental tension. On one side: the security interest in accurately and efficiently identifying individuals, detecting fraud, and enforcing border controls. On the other: the privacy interes...","og_url":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/","og_site_name":"EINSTEIN","article_published_time":"2026-07-29T08:00:00+00:00","article_modified_time":"2026-07-30T16:07:31+00:00","og_image":[{"width":720,"height":405,"url":"https:\/\/research.reading.ac.uk\/einstein\/wp-content\/uploads\/sites\/327\/2026\/05\/einstein_blog_banner-1.png","type":"image\/png"}],"author":"James Ferryman","twitter_card":"summary_large_image","twitter_misc":{"Written by":"James Ferryman","Estimated reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/","url":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/","name":"Privacy at the Border: Can Security and Data Protection Coexist? - EINSTEIN","isPartOf":{"@id":"https:\/\/research.reading.ac.uk\/einstein\/#website"},"datePublished":"2026-07-29T08:00:00+00:00","dateModified":"2026-07-30T16:07:31+00:00","author":{"@id":"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/287e525ca50fc2213a8cd2ad36fb324f"},"breadcrumb":{"@id":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/research.reading.ac.uk\/einstein\/privacy-at-the-border-can-security-and-data-protection-coexist\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/research.reading.ac.uk\/einstein\/"},{"@type":"ListItem","position":2,"name":"Privacy at the Border: Can Security and Data Protection Coexist?"}]},{"@type":"WebSite","@id":"https:\/\/research.reading.ac.uk\/einstein\/#website","url":"https:\/\/research.reading.ac.uk\/einstein\/","name":"EINSTEIN","description":"IntEroperable applIcations suIte to eNhance European identity and document SecuriTy and fraud dEtectIoN","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/research.reading.ac.uk\/einstein\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":"Person","@id":"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/287e525ca50fc2213a8cd2ad36fb324f","name":"James Ferryman","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/research.reading.ac.uk\/einstein\/#\/schema\/person\/image\/e455eff97bf15f08533b5794a7ae2be3","url":"https:\/\/secure.gravatar.com\/avatar\/bb9b6c1740f6a54e1761096e29ce475824a3bb90f2b70ebc385aa96656998cc9?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/bb9b6c1740f6a54e1761096e29ce475824a3bb90f2b70ebc385aa96656998cc9?s=96&d=mm&r=g","caption":"James Ferryman"},"url":"https:\/\/research.reading.ac.uk\/einstein\/author\/sis00jf\/"}]}},"_links":{"self":[{"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/posts\/858","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/users\/909"}],"replies":[{"embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/comments?post=858"}],"version-history":[{"count":3,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/posts\/858\/revisions"}],"predecessor-version":[{"id":996,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/posts\/858\/revisions\/996"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/media\/832"}],"wp:attachment":[{"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/media?parent=858"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/categories?post=858"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/tags?post=858"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/research.reading.ac.uk\/einstein\/wp-json\/wp\/v2\/coauthors?post=858"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}