What we teach is that there should never be third party use of the data. You have an arrangement using your biometric to acquire some service from that second party, and that's the only place that information is retained.

272

Basically, what the biometric does is, it requires an individual to be physically present. Whereas [with] a password, you can easily provide that to someone else.

191