生物特徵蒐集與利用制度之研究

Abstract

行政機關為履行各項行政任務並作成各種行政決定，須以一定資訊為據，從而有蒐集資料之需求，尤其生物辨識技術蔚為發展，以新興科技作為執法手段已成趨勢，惟國家在維護國家安全、社會秩序等公益目的下蒐用人民之生物特徵，卻未有完備之法律框架，恐侵害人民憲法第22條概括條款之人格權及資訊隱私權。另在現行積極國家運作之下，亦恐間接侵害個人之言論自由、集會遊行及受公平審判等權利。\r\n現行國家對於人民生物特徵之蒐用已不僅限於刑事偵查，更逐漸擴展至行政調查，並廣泛應用於各項行政任務中。惟既有之個人資料保護規範已不足以確保當事人之權益受充分保障，從而衍生出國家之蒐用行為之合法性及合憲性疑義，故有必要從基本權保障及個資保護之角度探討現行制度。\r\n本文選取美國、歐盟及英國之生物特徵制度作為觀察對象，從立法進程、監管機關、資料保護影響評估等層面進行分析與比較，以探求我國可借鏡之處。另透過「M-Police行動警察」及「校園使用生物辨識技術」兩個實務案例，審視我國實務上生物辨識之運用情形。最後，從法制面及政策面提出相關建議，以因應未來生物辨識技術所帶來之問題與挑戰。

In order to fulfill various administrative tasks and make diverse administrative decisions, the authorities concerned require specific information as a basis for their actions. As a result, there is demand for the collection of data. With the significant development of biometrics technology, the use of emerging technologies for law enforcement has become a trend. However, while the state employs the biometric data of individuals for the purposes of national security, social order, and other public interests, there is a lack of comprehensive legal framework. Therefore, it might infringe upon individuals` rights of personality and information privacy as outlined in Article 22 of the Constitution. Additionally, under the current proactive state operations, there is a concern that it might indirectly infringe upon individuals` rights of assembly, a fair trial, and freedom of speech.\r\nThe current state`s collection and use of individuals` biometric data, originally limited to criminal investigations, have gradually expanded to encompass administrative investigations and are extensively employed in various administrative tasks. However, the existing norms for personal data protection are insufficient to ensure the comprehensive safeguarding of the rights of the parties involved. As a result, doubts have arisen regarding the legitimacy and constitutionality of the state`s data collection practices. Therefore, it is necessary to explore the current system from the perspectives of fundamental rights safeguarding and personal data protection.\r\nThis article examines the biometric systems in the United States, European Union, and the United Kingdom, analyzing and comparing them from various angles, including legislative processes, supervisory authority, and data protection impact assessment. The goal is to identify aspects that could serve as valuable references. By examining two practical cases, \"M-Police\" and \" Campus Deployment of Biometrics Technology,\" this study assesses the practical application of biometric data in our country. Lastly, the article presents recommendations from legal and policy perspectives to address the challenges and issues that may arise from the use of biometric recognition technology in the future.