The application of biometric technology in the domain of identity management raises important ethical and legal questions. Biometrics has therefore been the subject of heated debates, particularly with regard to its relation to the issue of fundamental human rights. While some experts are calling for the introduction of data protection legislations that are specific to biometric technology, others are claiming that biometric data is personal data and, as such, can be covered by existing legislation. This article looks at some of the principles of the Council of Europe's Convention 108 and how they can apply to the collection and processing of biometric data.