This document provides high-level security and privacy requirements and recommendations for authentication using biometrics on mobile devices, including security and privacy requirements and recommendations for functional components and for communication.

This document is applicable to the cases that the biometric data and derived biometric data do not leave the device, i.e. local modes.