Your consent is required for the use of biometric data in the identity proofing process that Michigan Medicine uses to verify eligibility for a Michigan Medicine account.  

Michigan Medicine uses 1Kosmos to provide secure identity proofing services; if you do not accept these terms, you will be unable to obtain a Michigan Medicine account through this process. 

1. What types of biometric data are being collected? 

Facial Recognition: Captures a live facial image to match against government-issued ID photos. 

2. How is biometric data collected, stored, and used? 

Collection: 1Kosmos captures facial recognition data through your device with your consent. Liveness detection1 and behavioural biometrics may also be used to verify authenticity. 
Storage: Biometric data is encrypted using a public-private key pair and securely stored within a private, permissioned blockchain. There is no central storage of biometric information. You retain full control of your data through your private key. 
Use: Biometric data is used only for authentication and identity verification. Once verification is complete, the data is securely deleted unless you choose otherwise. 

3. How long is the biometric data retained? 

1Kosmos retains biometric data only as long as needed to complete the identity proofing process. By default, data can be processed and deleted immediately (minimum retention of 0 minutes). You may delete your biometric data at any time. These practices comply with GDPR, CCPA, and other global privacy regulations. 

4. What are the destruction practices for biometric data? 

When no longer needed, all biometric data is permanently and irreversibly deleted periodically using secure deletion mechanisms. Regular audits verify proper execution of these deletion practices, ensuring compliance with GDPR, CCPA, and global privacy standards.