The Netherlands' data protection authority, Autoriteit Persoonsgegevens, released a report answering questions on facial recognition programs. The AP said the technology can be used if it is "necessary for authentication or security purposes," otherwise the use of biometric data should be limited and can not be used to confirm someone's identity.