The Biometric Processing Privacy Code 2025 imposes new and more onerous obligations on certain uses of biometrics. But it’s not always straightforward to figure out what’s in scope.

So we’ve put together a short and simple guide to help you figure out if the Code applies to your use case.

Access the guide here. And you can find out about the background to the Code here.

Note that the Biometric Processing Privacy Code comes into force on 3 November 2025 for new biometric processing starting after that date. Organisations already using biometrics have until 3 August 2026 to align themselves with the new rules.