Evaluation of Biometric Testing in the EU

A new policy brief led by Europol under the EU Innovation Hub for Internal Security examines how biometric performance is independently evaluated in Europe and what technical building blocks would be needed to establish an EU-run capability comparable to the large-scale programmes operated by the National Institute of Standards and Technology (NIST) in the US ¹.

Public authorities across the globe increasingly treat NIST’s Face Recognition Vendor Test (FRVT) and fingerprint evaluations as de-facto benchmarks for biometric testing at borders. However, the brief notes that these testing regimes are not tailored to European operational environments or legal constraints.

Technically, the report treats ‘independent evaluation’ as an ongoing, engineered capability rather than a one-off laboratory exercise. It emphasises the need for repeatable, standardised test protocols, such as ISO/IEC 19795 for reporting biometric accuracy and ISO/IEC 30107-3 for assessing presentation-attack detection, so that results can be reproduced and compared over time. It also stresses that meaningful evaluation depends on well-curated reference datasets whose provenance is documented.