Commonwealth Bank collection of Biometric Data
In 2024 the Commonwealth Bank made a policy change to collect and use biometric data from users PCs and Smartphones.
Background edit
The Commonwealth Bank expanded on their measures to secure accounts from scams and fraud by announcing CommBank Safe. Part of these measures included the collection of biometric (such as fingerprints and facial features_ and behavioural profile information (such as your keystroke typing patterns or scrolling or swiping activity).[1]
The Commonwealth Bank provided no 'sandbox' around securing this information and it can be utilised for anything in their privacy policy including, being shared with third parties or used to train their own AI tools.
Users are unable to opt out of this data collection and provided with a splash page when they log in with only an 'accept the new terms' option.
Commonwealth Bank's response edit
The Australian Financial Complaints Authority has received many complaints in relation to this new practice however is unable to investigate, as in each instance the Commonwealth Bank advise that this is 'company policy' and outside of the AFCA's jurisdiction (C2.2.2 (c) of the AFCA rules).
In each instance customers are advised to utilise alternative forms of access to their accounts, such as phone or attendance at a physical branch.
References edit
- ↑ 2. Collection, use and sharing - Commonwealth Bank Group Privacy Statement - https://www.commbank.com.au/support/privacy.html?ei=CB-footer_privacy