LRQA has awarded ISO/IEC 24745:2022 certification to NAVER Pay (Npay) for the biometric information protection system used in its facial recognition payment service, FaceSign.
To mark this achievement, a certification ceremony was held at NAVER 1784 on 2 November, attended by Park Sang-jin, CEO of NAVER Pay, and Fotis Kampouris, LRQA’s Executive Vice President for Asia Pacific.
[Image: Park Sang-jin, CEO of Npay (left), and Fotis Kampouris, LRQA’s Executive Vice President for Asia Pacific (right), at the ISO/IEC 24745 certification ceremony held at NAVER 1784]
The Growing Adoption of Biometric Technology and the Role of International Standards in Information Protection
The use of biometric technology is expanding rapidly, with services now enabling identity verification and payments through facial recognition alone. As biometric information is increasingly used not only in financial and payment services but also in access control, identity verification and other applications, the importance of technical safeguards and international standards for protecting this information continues to grow.
Unlike passwords, biometric information is based on an individual's unique physical characteristics and cannot be easily changed or reissued. Organisations using biometric technologies must therefore implement appropriate safeguards when processing and storing biometric information to prevent unauthorised disclosure or misuse.
ISO/IEC 24745 is an international standard developed to protect biometric information, providing requirements and guidance for its protection. Two of its key principles are irreversibility, which aims to prevent the reconstruction of original biometric information from protected data, and unlinkability, which aims to prevent biometric information from being linked across different systems.
Building Confidence in Biometric Information Protection Through Independent Third-Party Assessment
LRQA conducted an independent audit of the biometric information protection system used in NAVER Pay’s FaceSign service and confirmed its conformity with the requirements of ISO/IEC 24745:2022. This certification represents an example of how international standards can be used to independently assess the adequacy of biometric information protection measures in biometric payment services.
Fotis Kampouris, LRQA’s Executive Vice President for Asia Pacific, commented:
“Mobile payments and digital financial services are growing rapidly across the Asia-Pacific region. As biometric technologies become more widely adopted for payments, identity verification and other applications, businesses must consider not only the convenience these technologies offer, but also how to manage security risks and maintain customer trust.”
He added:
“NAVER Pay’s ISO/IEC 24745 certification demonstrates these efforts to protect biometric information. As digital payment services continue to expand across the Asia-Pacific region, we expect more businesses to seek to demonstrate the conformity of their information protection measures through international standards and independent third-party certification.”
