Biometric Data Safeguard Policy and Consent

Purpose

BluSKY, BluB0X’s cloud-based physical security software, provides access through a property’s portals or, via elevator, to its floors. 

BluSKY supports many types of devices to control access to a property, including biometric identification devices.

The purpose of this policy is to document BluB0X’s procedures for the collection, use, safeguarding, storage, retention, and destruction of the biometric data that may be collected and stored in BluSKY so individuals can use the biometric devices.

Definition

Biometric data means information stored in BluSKY that depicts an individual’s physical characteristics that can be used to identify that individual. Biometric data can include fingerprints, voiceprints, a retina scan, scans of hand or face geometry, or other such data.   Even though a camera may be used to create biometric data, the data itself does not include a photo: it is a unique alphanumeric string that cannot be reverse-engineered into a representation of the individual’s appearance.

Policy

BluB0X’s policy is to protect and store all biometric data that is stored in BluSKY in accordance with applicable standards and laws, including, any local laws or Biometric Information Privacy Acts.

An individual’s biometric data will not and cannot be collected or otherwise obtained by BluSKY unless the individual willingly submits to this enrollment process.

The act of enrollment signifies the individual’s consent to the storage and use of his/her biometric data for the purpose of access control to the properties served by the security system to which the device is connected. 

Individual’s biometric data is usually kept on file up to three (3) years after the removal of the individual’s personal record from active status in the BluSKY databases.

BluB0X will not sell, lease, trade, or otherwise profit from an individual’s biometric data.

BluB0X will not disclose biometric data unless (a) consent is obtained, (b) disclosure is required by law, or (c) disclosure is required by a subpoena.

BluB0X will store, transmit, and protect biometric data using a reasonable standard of care and in a manner that is the same as or exceeds the standards followed in maintaining other confidential and sensitive information.

BluB0X will permanently destroy an individual’s biometric data from BluSKY within a reasonable time following the setting of the individual’s record from “Active” to “Inactive”.

In the event BluB0X begins to apply biometric data to any additional purpose, BluB0X will update this policy.

Procedure

The use of a biometric device associated with a portal or elevator requires that the individual willingly submit to an enrollment process which varies by device type. 

The act of enrollment signifies the individual’s consent to the storage and use of his/her biometric data for the purpose of access control to the properties served by the security system to which the device is connected. 

Some Property Managers may require that each individual sign a consent before he/she is permitted to enroll for use of one or more of the security system’s biometric devices.  A sample Consent Form is attached to this Policy.

BluSKY collects, stores, and uses the individual’s biometric data for the purposes of giving people access through a property’s portals or, via elevator, to its floors, and for maintaining accurate records of all access requests, including the date & time of the request, the location of the request, the identity of the requestor, and whether access was granted or denied.

A copy of this policy is publicly available in BluINFO at https://knowledge.blub0x.com/