Paranoid? Who, me?

XYZ Plasma Company has informed me that it has adopted this Acknowledgement of Biometric Policy and Consent Form to address how it may use biometric equipment (“Equipment”) for identity verification. I understand that the Equipment may scan my finger, hand, face, retina, iris or voice (“Biometric Identifier”) to obtain an encrypted mathematical algorithm or code (“Biometric Information”) which will be used to confirm my identity. The policy set forth below explains how XYZ Plasma and/or its biometric equipment vendors (“Vendors”) may collect, use, store, disclose and destroy this Biometric Information.

I understand that: (1) the Equipment will scan my finger (or other Biometric Identifier) to create an encrypted Biometric Information; (2) thereafter, each time I use the Equipment, my finger (or other Biometric Identifier) will be scanned and compared to the Biometric Information created by the initial scan; (3) my Biometric Identifier is not stored by XYZ Plasma or its Vendors; and (4) my Biometric Information is collected, used and stored in the Equipment, but it is encrypted and cannot be reverse engineered to return it to its original form.

I understand that my Biometric Information will be used for identity verification purposes and will be destroyed no later than one (1) year after the date that I have ceased to attempt to donate my plasma at XYZ Plasma for six (6) consecutive months. I also understand that XYZ Plasma and its Vendors will use a reasonable standard of care if they store or transmit my Biometric Information as they do with other confidential information and my Biometric Information may be accessible by XYZ Plasma and its Vendors only.

 

CPU-FORM-000186595 V1.0

I investigated the possibility of "donating" (more accurately "selling") my plasma to a large, commercial collector of such.

As I was in-processed, I was baffled by the effort that was put into taking my "identification picture" which I assumed was for the file or for a card. The woman taking the picture really went into contortions making sure the doorknob was not in the picture which seemed very strange at the time.

Unlike most of the new donors, I actually read the seven documents they gave me to read AFTER she took my picture.

The terms of the "release of responsibility" for Biometric Data was a non-starter for me.

The language about "we do not store your data...it is in the equipment..." is the same as saying "we do not collect your personal data...we put in a file..." Total bullshit intended to mislead people as is the meaningless term "reasonable standard of care..." with regard to data security.

And what is with the bullshit word "...may..." in the context they store or transmit my Biometric Information as they do with other confidential information and my Biometric Information may be accessible by XYZ Plasma and its Vendors only. Given rudimentary knowledge of English grammar, it also means they are informing me that my "confidential information" might be available to other-than XYZ and Venders ONLY. "...may..." is a very different word than "...shall..." and every lawyer knows it.

Another red-flag for me was "Vendors" which can be a very flexible term. "I dub thee Sir Vendor, now pay me $9999 and take the thumb-drive". The text is silent on "third party" vendors, that is, parties that the main vendor subcontracts work to. The fact that the document is silent about them probably means they can be considered extensions of the original vendor and thus are identical to the Vendor.

A third red-flag was that I was prohibited from taking a hard-copy of the document home with me. A "Release" is a contract and it is customary for both parties who agree to a contract get a copy of it. I was not born yesterday. I looked the documents over and there were no Copyright notices on any of them...and I took a picture. I did not sign it. I walked out without donating.

I think I am hosed on the photo.