Processing of personal data in relation to authentication of travel- and identity documents and when assessing biometric information

Categories of personal data

The Danish National ID Centre processes both ordinary and special categories of personal data in connection with the authentication of travel- and identity documents and when assessing biometric information. The following ordinary personal data is registered and stored in the Centre’s case management- and archiving system:

1. Name of the document holder
2. Facial images or fingerprints of persons, which requesting authorities have submitted for assessment
3. Case number with the requesting authority 
4. Case number with the Danish National ID Centre 
5. Archive number in the Centre’s case management- and archiving system 
6. An electronic copy of the examined document

Special categories of personal data, such as sensitive information, are stored temporarily in the Danish National ID Centre’s case management system for the duration of the case in question. An electronic copy of the document is transferred to the Centre’s case management- and archiving system when the examination of the document is complete and the case is closed. Special categories of personal data such as facial images and fingerprints are registered and handled in the Centre’s case management- and archiving system.

Legal basis

Ordinary personal data is processed according to art. 6 (1), letter e) of the General Data Protection regulation and sensitive personal data is processed according to art. 9 (2), letter g) of the General Data Protection Regulation.

Recipients and categories of recipients

Upon the completion of the document examination, the Danish National ID Centre will return the examined documents together with the relevant personal data to the requesting authority, when the case is closed. In cases relating to biometric information such as facial images and fingerprints, the result of the Centre’s assessment and comparison of the submitted images is returned to the requesting authority.
Depending on the circumstances, information concerning the document holder or concerning the persons from which facial images or fingerprints are submitted to the Centre, can be forwarded to:

1. Parliament (This will usually happen in connection to a request for access to information from a parliamentary committee).
2. Other ministries and agencies (Possibly in connection with a request for public access to information).
3. The Danish Police and the Danish Prosecution Service. 
4. Danish diplomatic missions.

Storage of personal information

The Danish National ID Centre retains an electronic copy of the examined document in the Centre’s case management- and archiving system. In a similar way digital copies of facial images or fingerprints, which the Centre has been requested to assess, is stored in the Centre’s case management- and archiving system. Data are stored as long as it is necessary in order to meet relevant requirements. Data are stored within the Centre’s case management- and archiving system for a maximum of 15 years.