Search-Preserving Anonymization (SPAn) is a privacy-first approach that enables organizations to perform high-fidelity biometric search, verification, authentication, classification, and collaboration while using anonymized biometric templates.
Unlike most biometric systems that store raw biometric information which links back to an individual, SPAn transforms biometric templates into anonymized versions that preserve search and lookup functions while preventing re-identification.
The result is a powerful new approach to biometric privacy protection that places privacy protection first, maximising public trust, significantly reducing risk of privacy breach, simplifying compliance obligations, and supporting trusted biometric operations at scale.
Search-Preserving Anonymization (SPAn) is a form of biometric anonymization that retains only the proximity information required to compare biometric templates while removing the ability to identify, reconstruct, or derive information about the original individual.
To qualify as SPAn compliant algorithm, a transformed biometric template must meet the following five criteria:
Together the SPAn criteria realize the highest possible level of achievable data minimization. SPAn means only the mathematical minimum of information necessary for biometric search is retained. It is the strongest achievable position for privacy protection that also supports search and match.
It should be no surprise that many global privacy regulations implicitly require SPAn by necessitating optimal data minimization. These include the European Union GDPR, California CCPA / CPRA, Texas TDPSA, Utah UCPA, Brazil LGPD, Canada PIPEDA, United Kingdom UK-GDPR, Australia APP and New Zealand IPP.
Most biometric systems rely heavily on templates that remain linked to an individual’s identity.
This creates risk and ongoing concerns such as:
Because biometric information is permanent and cannot be changed like a password, organizations face increasing pressure to minimize the collection, storage, and exposure of biometric data.
SPAn addresses these challenges by making anonymization the default state of biometric search. SPAn is the strongest Privacy-First approach.
A common misconception is that anonymization limits biometric functionality.
SPAn supports the same operational capabilities organizations already rely on, including:
Organizations can therefore gain the benefits of anonymization without sacrificing any functionality related to biometric search.
Privacy regulations and standards increasingly require organizations to demonstrate proportionality, data minimization, and privacy-by-design as defined by standards such as GDPR. SPAn achieves the highest standard of privacy-by-design compliance.
Because SPAn removes the biometric data elements that create privacy risk, organizations can focus compliance assessments on assertable SPAn compliance and examination of additional attributes collected.
This can significantly reduce the effort required for:
SPAn makes proportionality requirements substantially easier to satisfy because optimal data minimization has already been achieved.
Organizations implementing biometric systems often face significant effort when attempting to satisfy privacy and protection requirements outlined in standards such as:
Because SPAn is built around anonymization, non-reversibility, and optimal data minimization, many of the controls, assessments, and protection objectives addressed by these standards are inherently satisfied.
Rather than treating privacy as an additional layer applied after deployment, SPAn incorporates privacy protection directly into the biometric template design (Privacy First), reducing implementation complexity and helping organizations accelerate compliance initiatives.
SPAn creates new opportunities for secure collaboration between organizations.
Whether supporting multiple agencies, trusted ecosystems, or federated identity initiatives, organizations can determine whether records relate to the same individual without sharing personally identifiable information.
This enables:
SPAn is particularly valuable in digital wallet and verifiable credential environments.
If a traditional biometric template is compromised, the privacy consequences can be severe.
With SPAn:
Contact us to discuss licensing Attain Insight’s patent-approved Intrinsic SPAn algorithm.
Attain Insight is a member of the Biometrics Institute, supporting the responsible, ethical, and privacy-preserving use of biometric technologies worldwide.
