Skip to main content
Back

CEN/TR 18241:2025

Privacy management in products and services - Biometric access control products and services

General information

Valid from 15.12.2025
Base Documents
CEN/TR 18241:2025
Directives or regulations
None

Standard history

Status
Date
Type
Name
15.12.2025
Main
This document contains recommendations on how to integrate the principle of ‘data protection and privacy by design’
during the entire lifecycle of biometric access-control products and services, in order to achieve ‘data protection and
privacy by default’.
Biometric facial recognition for access control is covered by this document. Biometric facial recognition for surveillance is
covered by CEN/CLC/JTC 13 TR ‘Video surveillance’.
This document specifies recommendations for the management of data protection and privacy by design in biometricaccess-
control products and services. This document extends ISO/IEC 27552. This document applies to aspects of data
protection and privacy by design. This document is not applicable to non-biometric aspects of access control, or to aspects
not relating to data protection or privacy.

Required fields are indicated with *

*
*
*
*
PDF
12.40 € incl tax
Paper
12.40 € incl tax
Browse standard from 2.48 € incl tax
Standard monitoring

Customers who bought this item also bought

Main

EVS-EN 16931-1:2026

Electronic invoicing - Part 1: Semantic data model of the core elements of an electronic invoice
Newest version Valid from 04.05.2026
Main

EVS-EN ISO/IEC 29134:2026

Information technology - Security techniques - Guidelines for privacy impact assessment (ISO/IEC 29134:2023)
Newest version Valid from 15.06.2026
Main

EVS-EN ISO/IEC 29151:2026

Information security, cybersecurity and privacy protection - Controls, requirements, and guidance for personally identifiable information protection (ISO/IEC 29151:2026)
Newest version Valid from 17.08.2026
Main

EVS-EN ISO/IEC 27017:2026

Information security, cybersecurity and privacy protection - Information security controls based on ISO/IEC 27002 for cloud services (ISO/IEC 27017:2026)
Newest version Valid from 17.08.2026