The ruling in part reflects a tension between how biometrics are often used in practice and the definition of biometrics as “special category data” under GDPR.

Safeguarding failures have been uncovered in a national health service, resulting in patients being given the wrong results ...