Amendment 240· GDPR Article 9(2)(l)

(l) processing of biometric data is necessary for the purpose of confirming the identity of a data subject (verification), where the biometric data or the means needed for the verification is under the sole control of the data subject.

(l)processing of biometric data is necessary for the purpose of confirming the identity of a data subject (verification), where the biometric data or the means needed for the one-to-one verification is under the sole control of the data subject and, where applicable, subject to appropriate safeguards to protect the fundamental rights and the interests of the data subject as laid down in Union law or Member State law, in accordance with paragraph 4 of this Article.’