In consideration of the guarantees taken by GMAT to protect privacy, the CNIL authorized GMAC use of the new PalmSecure biometric device to authenticate the identity of individuals taking the GMAT. In the near future, data collected from this device will be used to match candidate information across a central database that includes biometric data from individuals sitting for the exam at other test centers around the world.

The GMAT exam, which is used by almost 2,000 business schools worldwide as part of the admission process, is currently the only examination that uses the new PalmSecure palm vein identification technology. PalmSecure features a near-infrared light that captures a palm vein pattern and generates a unique encrypted biometric template that is matched against the pre-registered candidate’s palm vein pattern, thus ensuring that the test taker is that candidate. It offers a highly reliable form of authentication because it uses no trace technology, no image is ever stored, and the data cannot be read by other devices. As the CNIL noted in its approval, “It is not likely to be captured without the knowledge of the person concerned and therefore presents very little risk for the civil liberties and fundamental rights of the individuals.”

“We want to express our appreciation to the CNIL for reinforcing, in its decision, our commitment to leadership in protecting personal data and complying with international data privacy laws,” said David A. Wilson, president and CEO of GMAC. “We want to ensure the highest level of security to protect the interests of schools and of honest test takers.”