NatWest has informed customers of an upcoming change to how it processes biometric data, scheduled for 20 May 2026. The bank has been emailing users of its online banking services, but emphasises that no action is required from customers.
Biometric data includes unique physical features such as fingerprints, facial structure, and voice patterns. Currently, customers give explicit consent for the bank to use this data when setting up biometric approval in the mobile app or Voice ID for Telephone Banking. From 20 May, NatWest will instead rely on 'legitimate interests' under data protection law as the legal basis for processing.
The bank stated: 'Legitimate interests is a term in data protection law. It lets us use your data when we have a clear and fair reason that supports important services – in this case, helping to keep your account secure and prevent fraud.' NatWest confirmed that there will be no changes to how customers use the app or Telephone Banking, and their privacy rights remain intact, including the right to object to data processing.
NatWest serves over 20 million customers and has seen upwards of 10 million daily mobile app users. The update comes amid a broader shift towards digital banking, with the bank recently announcing the closure of dozens of branches over the coming year.
