{"id":31721,"date":"2026-05-04T11:52:38","date_gmt":"2026-05-04T09:52:38","guid":{"rendered":"https:\/\/www.legalpin.com\/?p=31721"},"modified":"2026-07-21T15:56:25","modified_gmt":"2026-07-21T13:56:25","slug":"biometric-signatures","status":"publish","type":"post","link":"https:\/\/www.legalpin.com\/en\/blog\/biometric-signatures\/","title":{"rendered":"Biometric Signatures in Digital Contracts: GDPR Guide"},"content":{"rendered":"<style id=\"lp-biometric-signature-layout\">\n.lp-callout{margin:28px 0;padding:22px 24px;border-radius:14px;background:#f2f7ff;border-left:5px solid #039def;color:#0a2540}.lp-callout strong{display:block;margin-bottom:6px;color:#004aad}.lp-cta{margin:38px 0;padding:30px;border-radius:16px;background:#02022c;color:#fff;display:flex;align-items:center;justify-content:space-between;gap:24px;flex-wrap:wrap}.lp-cta h2{margin:0 0 10px!important;color:#039def!important;font-size:22px!important}.lp-cta ul{margin:0;padding-left:20px}.lp-cta a{display:inline-block;padding:13px 24px;border-radius:10px;background:#039def;color:#02022c!important;font-weight:700;text-decoration:none;white-space:nowrap}.lp-faq{margin:28px 0;border:1px solid #e2e8f0;border-radius:14px;overflow:hidden;box-shadow:0 4px 12px rgba(2,2,44,.06)}.lp-faq details{margin:0;border-bottom:1px solid #e2e8f0;background:#fff}.lp-faq details:last-child{border-bottom:0}.lp-faq summary{padding:18px 54px 18px 20px;background:#f2f7ff;color:#0a2540;font-weight:700;cursor:pointer;list-style:none;position:relative}.lp-faq summary::-webkit-details-marker{display:none}.lp-faq summary:after{content:'+';position:absolute;right:20px;top:50%;transform:translateY(-50%);color:#0072ff;font-size:24px}.lp-faq details[open] summary:after{content:'\u2212'}.lp-faq .lp-answer{padding:4px 20px 18px;color:#334155}.lp-faq .lp-answer p{margin:14px 0 0}@media(max-width:768px){.lp-cta{padding:24px 20px;align-items:flex-start}.lp-cta a{width:100%;text-align:center}.lp-callout{padding:18px 20px}}\n<\/style>\n<p>[et_pb_section fb_built=&#8221;1&#8243; theme_builder_area=&#8221;post_content&#8221; _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221;][et_pb_row _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; theme_builder_area=&#8221;post_content&#8221;][et_pb_column _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; type=&#8221;4_4&#8243; theme_builder_area=&#8221;post_content&#8221;][et_pb_text _builder_version=&#8221;4.27.4&#8243; _module_preset=&#8221;default&#8221; theme_builder_area=&#8221;post_content&#8221; hover_enabled=&#8221;0&#8243; sticky_enabled=&#8221;0&#8243;]<\/p>\n<p><strong>Biometric signing<\/strong> evokes fingerprints on a phone, facial recognition or a captured stroke on a tablet.<\/p>\n<p>For <strong>law and compliance<\/strong> you should separate <strong>who signs<\/strong> (strong identity) from <strong>what was accepted<\/strong> (content and contractual intent).<\/p>\n<p>Here we summarise <strong>definitions<\/strong>, <strong>GDPR and national Spanish overlays<\/strong>, links to <strong>eIDAS<\/strong> and <strong>Law 6\/2020<\/strong>, <strong>processing risks<\/strong> and <strong>practice tips<\/strong> for law firms and technology teams.<\/p>\n<aside class=\"lp-callout\"><strong>Key point<\/strong>Biometrics can strengthen signer authentication, but they do not by themselves replace the required signature level, document integrity or chain of custody.<\/aside>\n<p><strong>Legalpin<\/strong>, an <strong>encrypted certified digital messaging platform<\/strong> that turns electronic communications into <strong>traceable evidence<\/strong>, fits when you pair <a href=\"https:\/\/www.legalpin.com\/en\/electronic-signature\/\"><strong>electronic signature<\/strong><\/a> with <a href=\"https:\/\/www.legalpin.com\/en\/certified-email\/\"><strong>certified email<\/strong><\/a> or <a href=\"https:\/\/www.legalpin.com\/en\/buromail\/\"><strong>buromail<\/strong><\/a>.<\/p>\n<p><a href=\"https:\/\/www.legalpin.com\/en\/servicios\/\"><strong>Integrations and the API<\/strong><\/a> help close <strong>notify then sign<\/strong> cycles without splitting probative coherence across folders.<\/p>\n<h2 id=\"what-biometrics-mean-inside-an-electronic-signature-flow\">What biometrics mean inside an electronic signature flow<\/h2>\n<p><strong>Biometric data<\/strong> are measurable <strong>stable<\/strong> physiological or behavioural traits.<\/p>\n<p>In contracting they commonly act as an <strong>authentication credential<\/strong> before issuing an electronic signature.<\/p>\n<p><strong>Do not confuse<\/strong> a static rubric image pasted into a PDF without cryptography with a <strong>robust evidence pipeline<\/strong>.<\/p>\n<p><strong>Time-series stroke capture<\/strong> matters when the design includes contractually agreed <strong>graphometric<\/strong> analysis.<\/p>\n<p><strong>Legal bases<\/strong> for processing are not replaced by attractive UX even if conversion improves.<\/p>\n<aside class=\"lp-callout\"><strong>GDPR tip<\/strong>Before collecting biometric data, document the purpose, legal basis, retention period and why a less intrusive alternative cannot adequately address the risk.<\/aside>\n<h2 id=\"gdpr-special-categories-and-proportionality\">GDPR special categories and proportionality<\/h2>\n<p>Under the GDPR, biometric data used to <strong>uniquely identify<\/strong> a person are <strong>special category<\/strong> personal data.<\/p>\n<p>Processing is only lawful when <strong>strictly framed legal bases<\/strong> apply, including <strong>explicit consent<\/strong> or other narrow statutory grounds.<\/p>\n<p><strong>Privacy notices<\/strong> must be <strong>clear and purpose-specific<\/strong>, not a single pre-ticked box rushed before go-live.<\/p>\n<p>Involve your <strong>data protection officer<\/strong> and legal <strong>from the pilot<\/strong>, not after a press incident.<\/p>\n<p><strong>FAR and FFR style error metrics<\/strong> belong primarily to engineering; <strong>pasting them into public marketing<\/strong> without context misleads courts and users.<\/p>\n<h3 id=\"spanish-lopdgdd-context-and-high-risk-scenarios\">Spanish LOPDGDD context and high-risk scenarios<\/h3>\n<p>The <strong><a href=\"https:\/\/www.aepd.es\/\" target=\"_blank\" rel=\"noopener\">AEPD<\/a><\/strong> has repeatedly stressed <strong>proportionality<\/strong> of processing.<\/p>\n<p>Before mandating biometrics, test whether <strong>less intrusive<\/strong> alternatives suffice (national eID flows where available, robust OTP managed well).<\/p>\n<p><strong>Voluntary prior consultations<\/strong> or a well written <strong>DPIA<\/strong> reduce surprises at inspection.<\/p>\n<p>For <strong>children<\/strong>, using biometric traits must be <strong>exceptional, justified and supervised<\/strong>.<\/p>\n<h2 id=\"eidas-law-62020-spain-and-where-biometrics-sit\">eIDAS, Law 6\/2020 (Spain) and where biometrics sit<\/h2>\n<p>Across the EU, <strong>eIDAS<\/strong> distinguishes <strong>simple, advanced and qualified<\/strong> electronic signatures with different effects depending on matter and applicable law (<strong><a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=CELEX:32014R0910\" target=\"_blank\" rel=\"noopener\">eIDAS Regulation<\/a><\/strong>).<\/p>\n<p>In Spain, <strong><a href=\"https:\/\/www.boe.es\/buscar\/act.php?id=BOE-A-2020-9823\" target=\"_blank\" rel=\"noopener\">Law 6\/2020<\/a><\/strong> frames parts of the trust services environment for electronic tools.<\/p>\n<p><strong>Qualified signatures<\/strong> carry the highest PSCQ-backed assurances where law or administration requires them.<\/p>\n<p><strong>Simple or advanced<\/strong> flows can suit <strong>high volume<\/strong>, <strong>lower expected litigation<\/strong> or carefully risk-managed internal SLAs.<\/p>\n<p>Biometrics usually act as <strong>prior authentication<\/strong>, not an automatic substitute for the full qualified-signature stack when that level was legally required.<\/p>\n<h3 id=\"do-not-merge-psd2-identity-with-full-contract-evidence\">Do not merge PSD2 identity with full contract evidence<\/h3>\n<p>For payments in the European space you often see <strong>strong customer authentication<\/strong>.<\/p>\n<p>Elements cover <strong>knowledge<\/strong>, <strong>possession<\/strong> and sometimes <strong>inherence<\/strong>.<\/p>\n<p>Biometrics on a <strong>secure device<\/strong> can contribute to <strong>SCA<\/strong> for a <strong>specific payment moment<\/strong>.<\/p>\n<p>That <strong>strengthens the payment instant<\/strong> but does not by itself replace <strong>proof of a complex multi-party deal<\/strong>, technical annexes or finance clauses living elsewhere.<\/p>\n<h2 id=\"graphometry-stroke-metadata-and-custody-chains\">Graphometry, stroke metadata and custody chains<\/h2>\n<p><strong>Dynamic stroke analysis<\/strong> records pressure, speed and pauses when someone signs on a tablet or touch display.<\/p>\n<p>Those signals can be <strong>highly identifying<\/strong>, so <strong>multi-year retention<\/strong> needs <strong>purpose limitation<\/strong> and clear policy.<\/p>\n<p>Server custody should combine integrity (<strong>hashes<\/strong>) and <strong>timestamps<\/strong> from admissible trust providers where the dossier calls for it.<\/p>\n<p><strong>Qualified flows with supervised video-ID<\/strong> mirror a PSCQ audited model distinct from informal tablet capture alone.<\/p>\n<p><strong>Parallel paper plus digital hybrids<\/strong> require stable version naming so later disputes do not pit <strong>contradictory clauses<\/strong> across channels.<\/p>\n<h2 id=\"legal-it-security-compliance-and-hr-in-one-room\">Legal, IT security, compliance and HR in one room<\/h2>\n<p><strong>Legal<\/strong> sets minimum signature tier by sector overlays (finance, health, critical infrastructure).<\/p>\n<p><strong>Security and IT<\/strong> maintain current encryption, segmentation where needed, key rotation and controls against <strong>replay<\/strong> or leaky capture terminals.<\/p>\n<p><strong>Compliance<\/strong> aligns AML\/KYC narratives with <strong>one DPIA story<\/strong> whenever biometrics feeds <strong>scoring<\/strong>, watchlists or automated decisions with legal effect.<\/p>\n<p><strong>HR<\/strong> reviews proportionality for <strong>presence control<\/strong> or physical access collective bargaining <strong>does not treat every fingerprint deployment equally<\/strong> when alternatives (cards, deferred PIN) exist.<\/p>\n<h2 id=\"remote-video-onboarding-aml-and-retaining-recordings\">Remote video onboarding, AML and retaining recordings<\/h2>\n<p>In <strong>financial onboarding<\/strong>, document reading calls with <strong>liveness checks<\/strong> scaled as an <strong>AML filter<\/strong>.<\/p>\n<p><strong>Keeping full recordings for years<\/strong> clashes with erasure rights, minimisation and <strong>supervisory proportionality<\/strong>.<\/p>\n<p>Ask vendors whether <strong>non-reversible tokens<\/strong> survive while <strong>raw video is destroyed<\/strong> once verification clears, where design and appetite allow.<\/p>\n<h2 id=\"retention-erasure-and-marketing-claims-aligned-with-gdpr\">Retention, erasure and marketing claims aligned with GDPR<\/h2>\n<p>The <strong>storage limitation principle<\/strong> forbids vague <strong>lifetime biometric archives<\/strong> promised in campaigns without periodic legal revisits.<\/p>\n<p>Plan <strong>certified deletes<\/strong> backed by logs you could <strong>replay for an investigator<\/strong> without scrambling.<\/p>\n<p>Exposure of facial or fingerprint templates <strong>is not undone by resetting a password<\/strong>, reputationally and technically.<\/p>\n<h2 id=\"spoofing-moulds-and-presentation-attacks\">Spoofing, moulds and presentation attacks<\/h2>\n<p>Security literature describes <strong>low-cost fingerprint spoofing<\/strong> moulds against inexpensive sensors.<\/p>\n<p><strong>Presentation attacks<\/strong> on face matching improve with mediocre quality <strong>deepfakes<\/strong>.<\/p>\n<p>Mitigations rely on short <strong>proof-of-life flows<\/strong>, <strong>multimodal capture<\/strong> and <strong>updated fraud models<\/strong>, not generic vendor slogans.<\/p>\n<p>Demand <strong>lab reports under NDA<\/strong> before publishing <strong>global fraud reduction<\/strong> percentages.<\/p>\n<h2 id=\"b2b-biometrics-project-checklist\">B2B biometrics project checklist<\/h2>\n<p><strong>Draft purpose, legal basis and recipients<\/strong> in plain language for data subjects.<\/p>\n<p><strong>Minimise collection:<\/strong> avoid <strong>raw samples<\/strong> in cloud buckets without documented necessity.<\/p>\n<p><strong>Review less sensitive options<\/strong> if hardware tokens or managed second factors cover residual risk affordably.<\/p>\n<p><strong>Document a DPIA<\/strong> when volume, vulnerability profile or cross-matching raises impact.<\/p>\n<p><strong>Prepare incident response<\/strong> with executive escalation, authority notification when required and calm media lines.<\/p>\n<p><strong>Review processor and sub-processor clauses<\/strong> when embeddings leave the EEA without safeguards.<\/p>\n<h2 id=\"three-eidas-levels-and-associated-biometrics-at-a-glance\">Three eIDAS levels and associated biometrics at a glance<\/h2>\n<p><strong>Simple<\/strong> electronic signatures favour speed for <strong>low litigation<\/strong> internal acts under sound monitoring.<\/p>\n<p><strong>Advanced<\/strong> strengthens signer identification, document integrity and cryptographic traceability; biometrics may be <strong>ancillary data<\/strong>, not a PSCQ shortcut where it does not belong.<\/p>\n<p><strong>Qualified<\/strong> rests on audited infrastructure and PSCQ issuance when administrations or statutes demand that ladder.<\/p>\n<h2 id=\"how-legalpin-closes-notify-then-sign\">How Legalpin closes notify-then-sign<\/h2>\n<p>Legal and operations teams use Legalpin to <strong>pair certified communications<\/strong> with <strong>electronic signatures at the tier chosen after risk analysis<\/strong>.<\/p>\n<p>Your <strong>API<\/strong> routes can chain <strong>delivery receipts<\/strong>, <strong>signing<\/strong> and external <strong>timestamping<\/strong> in one matter file where configuration allows.<\/p>\n<p>If readers already opened the <strong><a href=\"https:\/\/www.legalpin.com\/en\/servicios\/\">services page<\/a><\/strong>, keep deep technical specs there rather than cloning endless variants inside the article.<\/p>\n<p>For <strong>physical versus certified digital channels<\/strong> in Spanish practice, <strong><a href=\"https:\/\/www.legalpin.com\/blog\/burofax-vs-buromail\/\">burofax versus buromail<\/a><\/strong> remains a readable decision map.<\/p>\n<h3 id=\"byod-devices-and-remote-footprint\">BYOD devices and remote footprint<\/h3>\n<p>When signers rely on <strong>personal hardware<\/strong> outside headquarters, threat models shift.<\/p>\n<p>Understand whether templates process <strong>inside the handset<\/strong> or flow to perimeter you do not administer.<\/p>\n<p>Corporate rules against leaving <strong>plaintext contract copies on personal desktops<\/strong> are too often skipped in playbook drafts.<\/p>\n<p>Short <strong>staff training before rollout<\/strong> lowers accidental screenshot leaks to outsourced chat support.<\/p>\n<h3 id=\"template-portability-across-legal-tech-vendors\">Template portability across legal tech vendors<\/h3>\n<p>Some programmes assume <strong>changing vendor after three or five years<\/strong>.<\/p>\n<p>Contracts that <strong>trap templates in proprietary vaults<\/strong> without exit clauses create <strong>lock-in<\/strong> tensions with GDPR assistance duties when people exercise rights.<\/p>\n<p>Negotiate <strong>exportable artefacts<\/strong> and <strong>maximum handover SLAs<\/strong> for evidence bundles at termination.<\/p>\n<h3 id=\"children-and-vulnerable-cohorts\">Children and vulnerable cohorts<\/h3>\n<p>Schools, care homes or social programmes need <strong>prior legal sizing<\/strong> plus often <strong>additional authorisations<\/strong> before capturing biometric traits.<\/p>\n<p><strong>Best interests of the child<\/strong> anchors every serious governance conversation here.<\/p>\n<p>Vendors pitching <strong>instant universal onboarding<\/strong> without age and capacity nuances expose institutional clients.<\/p>\n<h3 id=\"registers-of-processing-dpia-and-internal-committee-rhythm\">Registers of processing, DPIA and internal committee rhythm<\/h3>\n<p>Treatment activities referencing biometrics must be <strong>explicit<\/strong> in inventories, not hidden inside a vague \u201cdigital signatures\u201d file.<\/p>\n<p>Impact assessments carry a <strong>scheduled review date<\/strong> and a <strong>named owner<\/strong>, not ornamental PDFs once signed by marketing-adjacent legal.<\/p>\n<p>Quarterly security notes with concise minutes demonstrate <strong>living governance<\/strong>.<\/p>\n<h3 id=\"non-european-saas-and-international-transfers\">Non-European SaaS and international transfers<\/h3>\n<p>GDPR permits transfers with <strong>appropriate safeguards<\/strong>, but <strong>political and litigation risk varies<\/strong> by jurisdiction.<\/p>\n<p>Ensure the DPIA references <strong>standard contractual clauses<\/strong>, <strong>adequacy decisions<\/strong> or <strong>supplementary measures<\/strong>, not unrelated US-centric paperwork ignoring Article 9 logic.<\/p>\n<p>Enterprise <strong>procurement audits<\/strong> increasingly review those matrices.<\/p>\n<h3 id=\"future-evidence-packs-and-homogeneous-archives\">Future evidence packs and homogeneous archives<\/h3>\n<p>Civil disputes may fight over <strong>incomplete metadata<\/strong> or <strong>broken chains of custody<\/strong>.<\/p>\n<p>Some teams therefore <strong>ZIP-seal artefacts with hashes<\/strong> and mirror copies through internal <strong>certified email<\/strong> archiving.<\/p>\n<p>Legalpin contributes as a <strong>certified communication layer<\/strong> that does not replace choosing the <strong>correct signature grade<\/strong> for the act, but <strong>thickens parallel proof<\/strong> when needed.<\/p>\n<section class=\"lp-cta\">\n<div>\n<h2>Complete the signature with a certified evidence chain<\/h2>\n<ul>\n<li>Electronic signature matched to the risk level<\/li>\n<li>Certified notification and time stamping<\/li>\n<li>Complete and traceable evidence record<\/li>\n<\/ul>\n<\/div>\n<p><a href=\"https:\/\/www.legalpin.com\/en\/free-trial\/\">Try Legalpin for free<\/a><\/section>\n<h2 id=\"frequently-asked-questions\">Frequently asked questions<\/h2>\n<div class=\"lp-faq\">\n<details>\n<summary>Does a selfie replace a complex Spanish notarial deed by default?<\/summary>\n<div class=\"lp-answer\">\n<p>Not broadly: many <strong>high-value property or mortgage deals<\/strong> still rely on <strong>in-person notarisation<\/strong> and sector rules.<\/p>\n<p><strong>Qualified electronic signatures<\/strong> and <strong>remote notarial channels<\/strong> are expanding, yet each deal needs <strong>case-specific advice<\/strong> and land-registry context.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Is storing thousands of biometric templates for years without revisiting purpose GDPR-safe?<\/summary>\n<div class=\"lp-answer\">\n<p>Usually <strong>high proportionality risk<\/strong> unless you regularly audit <strong>purpose, retention and legal basis<\/strong> and log those reviews for the controller.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Does a graphometric tablet always equal a qualified eIDAS signature?<\/summary>\n<div class=\"lp-answer\">\n<p>Not automatically.<\/p>\n<p>Graphodynamic capture <strong>without the relevant PSCQ chain<\/strong> produces a <strong>different assurance profile<\/strong> map it to expected litigation and governing law.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Can employees refuse workplace biometric access control?<\/summary>\n<div class=\"lp-answer\">\n<p>Outcomes depend on <strong>proportionality<\/strong>, <strong>alternatives<\/strong> (card, PIN, second factor) and role risk collective bargaining and labour doctrine matter per deployment.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Does Legalpin itself process client-captured biometric samples?<\/summary>\n<div class=\"lp-answer\">\n<p>Live projects define <strong>controller versus processor roles<\/strong> and <strong>data flows<\/strong> in contracts, commercial support and, where applicable, the <strong>PSCQ<\/strong> supporting qualified signatures.<\/p>\n<\/div>\n<\/details>\n<details>\n<summary>Where does certified SMS fit an electronic signature journey?<\/summary>\n<div class=\"lp-answer\">\n<p>It can be a <strong>parallel accredited channel<\/strong> for second notifications use Legalpin <strong><a href=\"https:\/\/www.legalpin.com\/en\/sms-certificado\/\">certified SMS<\/a><\/strong> when users prefer mobile to corporate inbox.<\/p>\n<\/div>\n<\/details>\n<\/div>\n<hr \/>\n<p><em>General information only; not individual legal advice.<\/em><\/p>\n<p>[\/et_pb_text][\/et_pb_column][\/et_pb_row][\/et_pb_section]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Biometric signatures vs electronic signatures under GDPR and eIDAS, Spanish Law 6\/2020 context, retention risks and certified workflows with Legalpin.<\/p>\n","protected":false},"author":8,"featured_media":31715,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_et_pb_use_builder":"on","_et_pb_old_content":"<!-- wp:divi\/placeholder \/-->","_et_gb_content_width":"","_uag_custom_page_level_css":"","footnotes":""},"categories":[67],"tags":[],"class_list":["post-31721","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2.jpg",1600,1067,false],"thumbnail":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-150x150.jpg",150,150,true],"medium":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-300x200.jpg",300,200,true],"medium_large":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-768x512.jpg",768,512,true],"large":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-1024x683.jpg",1024,683,true],"1536x1536":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-1536x1024.jpg",1536,1024,true],"2048x2048":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2.jpg",1600,1067,false],"et-pb-post-main-image":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-400x250.jpg",400,250,true],"et-pb-post-main-image-fullwidth":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-1080x675.jpg",1080,675,true],"et-pb-portfolio-image":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-400x284.jpg",400,284,true],"et-pb-portfolio-module-image":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-510x382.jpg",510,382,true],"et-pb-portfolio-image-single":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-1080x720.jpg",1080,720,true],"et-pb-gallery-module-image-portrait":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2-400x516.jpg",400,516,true],"et-pb-post-main-image-fullwidth-large":["https:\/\/www.legalpin.com\/wp-content\/uploads\/2026\/05\/firma-biometrica-featured-2.jpg",1600,1067,false]},"uagb_author_info":{"display_name":"erik","author_link":"https:\/\/www.legalpin.com\/en\/author\/erik-sa\/"},"uagb_comment_info":0,"uagb_excerpt":"Biometric signatures vs electronic signatures under GDPR and eIDAS, Spanish Law 6\/2020 context, retention risks and certified workflows with Legalpin.","_links":{"self":[{"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/posts\/31721","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/comments?post=31721"}],"version-history":[{"count":9,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/posts\/31721\/revisions"}],"predecessor-version":[{"id":32992,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/posts\/31721\/revisions\/32992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/media\/31715"}],"wp:attachment":[{"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/media?parent=31721"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/categories?post=31721"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.legalpin.com\/en\/wp-json\/wp\/v2\/tags?post=31721"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}