--- title: The Feedback Loop Inherent in GDPR description: One of GDPR's main goals was to protect the privacy of EU citizens, but it might have done just the opposite. image: https://blog.strongkey.com/hubfs/The%20Feedback%20Loop%20Inherent%20in%20GDPR%20Blog%20Post.png --- [![StrongKey Logo](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa118387d144_STR.Horizontal1_LightUSB_TM.png)](https://www.strongkey.com/) [Home](https://www.strongkey.com/) Solutions ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa554a87d2a0_chevron-down.svg) INDUSTRY ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa50e587d1ab_cpu%20(1).svg) [Fintech Payments, card capture ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6026cfe6abf7e7861b604289_bank.svg)](https://www.strongkey.com/solutions/industry/fintech) [Enterprise Fully scalable customization ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf9e687d218_star.svg)](https://www.strongkey.com/solutions/industry/enterprise) [Manufacturing IIoT integration, key injection ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6026d009d6756ce5aa5a0cf6_manufacturing.svg)](https://www.strongkey.com/solutions/industry/manufacturing) ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa2d4787d1e0_check-square.svg) COMPLIANCE [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa1de987d1e1_zap%20(1).svg) PSD2/SCA Integrated; low abandonment](https://www.strongkey.com/solutions/compliance/psd2-strong-customer-authentication) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa6a5787d1a2_credit-card.svg) PCI DSS Reduce costs and burden of audits](https://www.strongkey.com/solutions/compliance/pci-dss-card-capture-services) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf26e87d1ac_lock%20(1).svg) NACHA Easily secure deposit data](https://www.strongkey.com/solutions/compliance/nacha-deposit-data-protection) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa298687d1a1_database.svg) GDPR Application-level data protection](https://www.strongkey.com/solutions/compliance/gdpr-general-data-protection-2) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf0ba87d1ba_users.svg) CCPA Consumer data privacy](https://www.strongkey.com/solutions/compliance/ccpa-california-consumer-protection-act) Products ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa554a87d2a0_chevron-down.svg) SOFTWARE ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa215487d1ca_activity.svg) [FIDO2 Passwordless Authentication Reduce password-related costs ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaea2f87d1d9_user-check.svg)](https://www.strongkey.com/products/software/fido-strong-authentication) [Public Key Infrastructure Build new or update existing ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa991687d1d4_key.svg)](https://www.strongkey.com/products/software/pki-key-and-certificate-management) [Encryption & Tokenization For small and mid-sized applications ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa477087d1d3_shield.svg)](https://www.strongkey.com/products/software/tokenization-and-encryption) [Custom Solutions Work with us to find a solution ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6026cffdbccd1c7f01ee3fce_cicruit.svg)](https://www.strongkey.com/products/software/custom-solutions) ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaa92287d205_truck.svg) HARDWARE [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa1afb87d1b4_server%20(1).svg) Hosted Solutions We do the heavy lifting](https://www.strongkey.com/products/hardware/hosted-solution) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aac83e87d1d1_hard-drive%20(1).svg) Tellaro T-Series Specifically for SMBs](https://www.strongkey.com/products/hardware/products-tellaro-t-midmarket-small-business-data-security) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa298687d1a1_database.svg) Tellaro E-Series Enterprise data protection](https://www.strongkey.com/products/hardware/products-tellaro-e-enterprise-data-security-solution) Developer ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa554a87d2a0_chevron-down.svg) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa65cf87d1db_codepen%20(2).svg) Open Source Development Everyone wins when we share](https://www.strongkey.com/developer/developer) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaa41287d1e5_terminal.svg) Swagger API Docs Easy to use and learn](https://demo4.strongkey.com/getstarted/#/openapi) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa2b7687d1dc_log-in.svg) GitHub StrongKey FIDO Server Sample code, tutorials](https://github.com/StrongKey/fido2) About ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa554a87d2a0_chevron-down.svg) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aad93e87d1b7_home%20(1).svg) Company Our history, philosophy and future](https://www.strongkey.com/company) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf0ba87d1ba_users.svg) Partners and Resellers Who we do business with](https://blog.strongkey.com/) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa600c87d207_tv.svg) Newsroom Latest news about StrongKey](https://blog.strongkey.com/newsroom) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa000d87d1b5_book-open.svg) Resources Access our content and documentation](https://blog.strongkey.com/resources) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf14f87d20c_mic.svg) Events Where you'll be able to meet us](https://www.strongkey.com/events) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa54be87d1ce_briefcase%20(1).svg) Careers Join us to improve data security for all](https://www.strongkey.com/careers) [Blog](https://blog.strongkey.com/blog) [CONTACT](https://www.strongkey.com/contact) [DEMOS ![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa61e187d118_arrow-left.svg)](https://www.strongkey.com/demos) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa118387d144_STR.Horizontal1_LightUSB_TM.png)](https://www.strongkey.com/) [Home](https://www.strongkey.com/) Solutions COMPLIANCE [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa1de987d1e1_zap%20(1).svg) PSD2/SCA Integrated for low abandonment](https://www.strongkey.com/solutions/compliance/psd2-strong-customer-authentication) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa6a5787d1a2_credit-card.svg) PCI DSS Reduce costs and burdens of audits](https://www.strongkey.com/solutions/compliance/pci-dss-card-capture-services) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf26e87d1ac_lock%20(1).svg) NACHA Easily secure deposit data](https://www.strongkey.com/solutions/compliance/nacha-deposit-data-protection) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa298687d1a1_database.svg) GDPR Application-level data protection](https://www.strongkey.com/solutions/compliance/gdpr-general-data-protection-2) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf0ba87d1ba_users.svg) CCPA Consumer data privacy](https://www.strongkey.com/solutions/compliance/ccpa-california-consumer-protection-act) INDUSTRY [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6026cfe6abf7e7861b604289_bank.svg) Fintech Payments, card capture](https://www.strongkey.com/solutions/industry/fintech) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf9e687d218_star.svg) Enterprise Fully scalable customization](https://www.strongkey.com/solutions/industry/enterprise) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6026d009d6756ce5aa5a0cf6_manufacturing.svg) Manufacturing IIoT integration, key injection](https://www.strongkey.com/solutions/industry/manufacturing) Products SOFTWARE [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaea2f87d1d9_user-check.svg) FIDO Passwordless Authentication Reduce password-related costs](https://www.strongkey.com/products/software/fido-strong-authentication) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa991687d1d4_key.svg) Public Key Infrastructure Build new or update existing](https://www.strongkey.com/products/software/pki-key-and-certificate-management) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa477087d1d3_shield.svg) Encryption & Tokenization For enterprise applications](https://www.strongkey.com/products/software/tokenization-and-encryption) HARDWARE [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa1afb87d1b4_server%20(1).svg) Hosted Solutions We do the heavy lifting](https://www.strongkey.com/products/hardware/hosted-solution) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aac83e87d1d1_hard-drive%20(1).svg) Tellaro T-Series Specifically for SMBs](https://www.strongkey.com/products/hardware/products-tellaro-t-midmarket-small-business-data-security) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa298687d1a1_database.svg) Tellaro E-Series Enterprise data protection](https://www.strongkey.com/products/hardware/products-tellaro-e-enterprise-data-security-solution) Developer [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa65cf87d1db_codepen%20(2).svg) Open Source Collaboration Everyone wins when we share](https://www.strongkey.com/developer/developer) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaa41287d1e5_terminal.svg) Swagger API Docs Easy to use and learn](https://demo4.strongkey.com/getstarted/#/openapi) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa2b7687d1dc_log-in.svg) GitHub StrongKey FIDO Server Sample code, tutorials](https://github.com/StrongKey/fido2) About [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aad93e87d1b7_home%20(1).svg) Company Our history, philosophy, and future](https://www.strongkey.com/about/company) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa600c87d207_tv.svg) Newsroom Latest news about StrongKey](https://blog.strongkey.com/newsroom) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa000d87d1b5_book-open.svg) Resources Access our content and documentation](https://blog.strongkey.com/resources) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aaf14f87d20c_mic.svg) Events Where you'll be able to meet us](https://www.strongkey.com/about/events) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa54be87d1ce_briefcase%20(1).svg) Careers Join us to improve data security for all](https://www.strongkey.com/about/careers) [Blog](https://blog.strongkey.com/blog) [CONTACT](https://www.strongkey.com/contact) [Demos](https://www.strongkey.com/demos) [A. Khedron de León](https://blog.strongkey.com/blog/author/a-khedron-de-león) - Sep 17, 2019 # The Feedback Loop Inherent in GDPR - [Tweet](https://twitter.com/share) [GDPR and CCPA](https://blog.strongkey.com/blog/tag/gdpr-and-ccpa)  [FIDO](https://blog.strongkey.com/blog/tag/fido) GDPR’s “right to be forgotten” has generated some concerning results. The limits and pitfalls of retrieving one’s Personally Identifiable Information (PII) is [already creating ripples](https://www.theregister.co.uk/2019/08/09/gdpr_identity_thief/): being able to obtain PII by requesting a login reset, not being asked to provide adequate authentication, and requests being processed by legal or administrative staff as opposed to IT security personnel, to name a few. Let’s have a look at just some of the ways PII is recorded every day, in ways most of us don’t even consider. #### **Speak Clearly into the Microphone** The sheer volume of voice removal requests, if performed all at once, would represent a singularly behemoth [Distributed Denial of Service (DDoS)](https://us.norton.com/internetsecurity-emerging-threats-what-is-a-ddos-attack-30sectech-by-norton.html) attack. In the European Union alone, 62% of the populace in 2015—315 million people—reported making [several calls a day](https://www.statista.com/statistics/621068/mobile-phone-usage-frequency-in-the-eu/). A conservative 3 calls a day comes to 945 million—almost a billion calls a day. That was four years ago; the numbers only grow. That number doesn’t count the other ways our voices make it into corporate records (and thence into breach statistics): map requests, voice-to-text usage, smart speakers—in short, thousands of applications that use our voices and also rely on data carriers. Not surprisingly, figures show we are declining in the use of our phones, favoring [text messaging instead](https://www.cnn.com/2012/08/31/tech/mobile/problem-text-messaging-oms), but those records may still exist. #### **Turn and Face the Camera** Let’s face it, cameras are also everywhere, capturing our facial data to feed to identity algorithms, track our movements, and recognize variants of ourselves. PII includes our faces, retinas, and our fingerprints, which become increasingly valuable as forms of password-free authentication gain adoption. In light of recent [vulnerabilities in widely used fingerprint and face recognition software](https://www.theguardian.com/technology/2019/aug/14/major-breach-found-in-biometrics-system-used-by-banks-uk-police-and-defence-firms), businesses would do well to proactively “forget” their customer’s data and move to stronger forms of authentication, like FIDO2. Many people assume that it is already too late (fingerprints, unlike usernames and passwords, don’t change), because having them removed from the originating database in the case cited above just means some hacker has them, but the company with which you do business will not. However, the FIDO2 authentication protocols ensure that there are no saved forms of biometrics out in the world and that a hacker would need your registered device (phone, laptop, authentication key) and your biometrics to access the account specific to that device. It’s not a perfect system, but it does significantly increase the difficulty level for any bad actor wanting to impersonate you. #### **A Swab of the Tongue** DNA collection companies seem [unable to produce reliable results](https://www.chicagotribune.com/business/blue-sky/ct-dna-kits-23andme-20180117-story.html), but the DNA they collect is real enough. If you haven’t taken one of these spit-in-a-tube tests, they purport to discern information like allergies, predisposition to various forms of illness, natural athletic ability.  One breach’s findings show the account holder’s data is [kept right with the DNA data](https://healthitsecurity.com/news/dna-testing-service-vendor-reports-years-long-consumer-data-breach), which is consequently identifiable by other factors like a name or bank account number. Assuming a correct DNA analysis was obtained, a clever criminal could potentially use that data for many harmful purposes. The realistic chance, however, that a hacker has also invested in the expensive toolbox required to analyze DNA, and possesses the knowledge and skill to accurately do so is low. #### **Don’t Blink** [Ocular-based PII](http://www.m2sys.com/blog/biometric-hardware/iris-recognition-vs-retina-scanning-what-are-the-differences/) can be faked with similar ease. Both iris and retina scans use cameras to generate the comparative photo, which is then matched to a pre-obtained image. Iris scanning is done at a greater distance, and despite using infrared to map all the little intricacies in the iris, the control is still just a photo comparison. Retinal scans still generate a photo, but are in narrower use due to the proximity and specific position required for the camera to get a good take. Much like fingerprints, all the biometric methods of identifying us are graphical in nature and easy enough to fake with a little time and effort. Both of the non-inherent factors for two- or multi-factor authentication—“something you know,” or passwords, and “something you have,” like your phone or a FIDO device—are exchangeable if the need arises. They also can be taken, misplaced, or given away; the other option, or the “something you are” requirement, is satisfied with biometrics, and is thus much more difficult to obtain, but once gained, the data is hard to contradict. However, modern strong authentication methods encourage that no data used in authentication, biometric or otherwise, is stored in an unencrypted form, giving yet another layer of protection. #### **Resistance is Feudal** The global trend towards data regulations is challenging for companies to adjust for and then uphold, but the fun is just beginning. Conscientious users will want to review their data, then potentially have it removed; two different actions which must include all attendant information by which an identity could be correctly inferred. Even something as simple as an access request [gets complicated quickly](https://www.theguardian.com/technology/2018/apr/23/europe-gdpr-data-law-employer-employee). One can request *any* information about oneself, including interview results or any emails to you, from you, or about you. The requesting company, by GDPR standards, must redact any evidence of other people’s PII from the results, a task which could easily occupy dozens or hundreds of hours of painstaking edits. How will long-standing custodians of our voices and faces handle what will surely prove to be a Vesuvian outpouring of requests for access, or to be forgotten? Without advanced planning to enable organized processing of such requests by qualified people, you may find yourself scrambling to comply. If you want to avoid the pitfalls of conscientious data rights, considerations for the care and removal of PII must be built into the processes around and inside your products. As a responsible caretaker of consumer data, it’s up to you to make the choice; biometric authentication is a great leap above the username+password security of the past, and FIDO2 is even more secure. It may be a leap of faith, but you won’t be taking it alone, and if done correctly, it will make for one heckuva parachute. [![Click here to watch a simple breakdown of GDPR's most complicated encryption requirements.](https://no-cache.hubspot.com/cta/default/4723359/a39e0874-c5d7-4c01-b41f-7ab5a38a2e7d.png)](https://cta-redirect.hubspot.com/cta/redirect/4723359/a39e0874-c5d7-4c01-b41f-7ab5a38a2e7d) ### ALL TOPICS - [FIDO (45)](https://blog.strongkey.com/blog/tag/fido) - [Culture/Influence (31)](https://blog.strongkey.com/blog/tag/culture-influence) - [Cybersecurity ROI (29)](https://blog.strongkey.com/blog/tag/cybersecurity-roi) - [Breaches (16)](https://blog.strongkey.com/blog/tag/breaches) - [Encryption/Tokenization (16)](https://blog.strongkey.com/blog/tag/encryption-tokenization) - [Payments/E-Commerce (15)](https://blog.strongkey.com/blog/tag/payments-e-commerce) - [Disruptive Defenses (14)](https://blog.strongkey.com/blog/tag/disruptive-defenses) - [Key Management (11)](https://blog.strongkey.com/blog/tag/key-management) - [PSD2 (11)](https://blog.strongkey.com/blog/tag/psd2) - [GDPR and CCPA (8)](https://blog.strongkey.com/blog/tag/gdpr-and-ccpa) - [SCA (8)](https://blog.strongkey.com/blog/tag/sca) - [Events (7)](https://blog.strongkey.com/blog/tag/events) - [Employee Spotlight (6)](https://blog.strongkey.com/blog/tag/employee-spotlight) - [Ransomware (5)](https://blog.strongkey.com/blog/tag/ransomware) - [COVID-19 (4)](https://blog.strongkey.com/blog/tag/covid-19) - [PCI DSS (4)](https://blog.strongkey.com/blog/tag/pci-dss) - [Products (4)](https://blog.strongkey.com/blog/tag/products) - [Blockchain (3)](https://blog.strongkey.com/blog/tag/blockchain) - [Healthcare (3)](https://blog.strongkey.com/blog/tag/healthcare) - [Hybrid Cloud (RC3) (3)](https://blog.strongkey.com/blog/tag/hybrid-cloud-rc3) - [IoT (3)](https://blog.strongkey.com/blog/tag/iot) - [PKI (3)](https://blog.strongkey.com/blog/tag/pki) - [Press Releases (2)](https://blog.strongkey.com/blog/tag/press-releases) - [Citrix (1)](https://blog.strongkey.com/blog/tag/citrix) - [Passkeys (1)](https://blog.strongkey.com/blog/tag/passkeys) ### Most Popular [FIDO](https://blog.strongkey.com/blog/tag/fido) [Key Management](https://blog.strongkey.com/blog/tag/key-management) [Passkeys](https://blog.strongkey.com/blog/tag/passkeys) **[“Would you trust your bank with both keys to your ....](https://blog.strongkey.com/blog/would-you-trust-your-bank-with-both-keys-to-your-safe-deposit-box)** [FIDO](https://blog.strongkey.com/blog/tag/fido) [Disruptive Defenses](https://blog.strongkey.com/blog/tag/disruptive-defenses) **[An In-depth Guide to FIDO Protocols: U2F, UAF, and....](https://blog.strongkey.com/blog/guide-to-fido-protocols-u2f-uaf-webauthn-fido2)** [Key Management](https://blog.strongkey.com/blog/tag/key-management) [Cybersecurity ROI](https://blog.strongkey.com/blog/tag/cybersecurity-roi) **[Key Custodians: Who, What, Where, When, Why, and H....](https://blog.strongkey.com/blog/key-custodians-who-what-where-when-why-and-how)** [FIDO](https://blog.strongkey.com/blog/tag/fido) [Disruptive Defenses](https://blog.strongkey.com/blog/tag/disruptive-defenses) [Culture/Influence](https://blog.strongkey.com/blog/tag/culture-influence) **[FIDO 101: Understanding FIDO Strong Authentication....](https://blog.strongkey.com/blog/fido-101-strong-authentication)** ### Archive - [March 2026 (1)](https://blog.strongkey.com/newsroom/archive/2026/03) - [June 2025 (1)](https://blog.strongkey.com/newsroom/archive/2025/06) - [March 2022 (1)](https://blog.strongkey.com/newsroom/archive/2022/03) - [December 2021 (1)](https://blog.strongkey.com/newsroom/archive/2021/12) - [March 2021 (6)](https://blog.strongkey.com/newsroom/archive/2021/03) - [December 2020 (4)](https://blog.strongkey.com/newsroom/archive/2020/12) - [November 2020 (2)](https://blog.strongkey.com/newsroom/archive/2020/11) - [October 2020 (3)](https://blog.strongkey.com/newsroom/archive/2020/10) - [September 2020 (1)](https://blog.strongkey.com/newsroom/archive/2020/09) - [August 2020 (3)](https://blog.strongkey.com/newsroom/archive/2020/08) - [June 2020 (1)](https://blog.strongkey.com/newsroom/archive/2020/06) - [April 2020 (2)](https://blog.strongkey.com/newsroom/archive/2020/04) - [February 2020 (1)](https://blog.strongkey.com/newsroom/archive/2020/02) - [January 2020 (1)](https://blog.strongkey.com/newsroom/archive/2020/01) - [December 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/12) - [September 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/09) - [August 2019 (3)](https://blog.strongkey.com/newsroom/archive/2019/08) - [July 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/07) - [June 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/06) - [May 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/05) - [April 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/04) - [March 2019 (1)](https://blog.strongkey.com/newsroom/archive/2019/03) - [February 2019 (3)](https://blog.strongkey.com/newsroom/archive/2019/02) - [January 2019 (3)](https://blog.strongkey.com/newsroom/archive/2019/01) - [December 2018 (2)](https://blog.strongkey.com/newsroom/archive/2018/12) - [November 2018 (3)](https://blog.strongkey.com/newsroom/archive/2018/11) - [October 2018 (3)](https://blog.strongkey.com/newsroom/archive/2018/10) - [September 2018 (2)](https://blog.strongkey.com/newsroom/archive/2018/09) - [August 2018 (1)](https://blog.strongkey.com/newsroom/archive/2018/08) - [July 2018 (1)](https://blog.strongkey.com/newsroom/archive/2018/07) - [April 2018 (2)](https://blog.strongkey.com/newsroom/archive/2018/04) - [January 2018 (1)](https://blog.strongkey.com/newsroom/archive/2018/01) - [October 2017 (1)](https://blog.strongkey.com/newsroom/archive/2017/10) ![Strongkey - Logo](https://blog.strongkey.com/hubfs/Strongkey%20-%20Logo.png "Strongkey - Logo") StrongKey provides solutions to companies looking to solve for PCI DSS, PSD2 Strong Customer Authentication, passwordless authentication with FIDO, data privacy, public key infrastructure and other security challenges. Copyright 2022 StrongKey, Inc. - [Privacy Policy](https://www.strongkey.com/about/privacy-policy) - [Terms of Use](https://www.strongkey.com/about/terms-of-use) - [Cookie Policy](https://www.strongkey.com/about/cookie-policy) #### About - [Company](https://www.strongkey.com/about/company) - [Newsroom](https://blog.strongkey.com/newsroom) - [Events](https://www.strongkey.com/about/events) - [Careers](https://www.strongkey.com/about/careers) #### Solutions - [PCI DSS](https://www.strongkey.com/solutions/compliance/pci-dss-card-capture-services) - [FIDO](https://www.strongkey.com/products/software/fido-strong-authentication) - [PSD2 SCA](https://www.strongkey.com/solutions/compliance/psd2-strong-customer-authentication) - [CCPA](https://www.strongkey.com/solutions/compliance/ccpa-california-consumer-protection-act) - [GDPR](https://www.strongkey.com/solutions/compliance/gdpr-general-data-protection-2) - [NACHA](https://www.strongkey.com/solutions/compliance/nacha-deposit-data-protection) #### Resources - [Library](https://blog.strongkey.com/resources) - [CONTACT US](https://www.strongkey.com/contact) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/60526cad36f3a5e723525fba_GitHub_logo_white_10%25.png)](https://github.com/StrongKey) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa071787d2c3_Twitter.png)](https://twitter.com/strongkeyinc) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/5fbbeb5a2e59aa775287d2c0_Linkedin.png)](https://www.linkedin.com/company/strongkey) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/60526bcf0df80d185f961b8d_youtube_white_icon.png)](https://www.youtube.com/channel/UCueU61oRt9G6MILRSHIfimA) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6036be2bdf2d65e2d2fc906f_Instagram_5%25.png)](https://www.instagram.com/strongkeyinc/) [![](https://uploads-ssl.webflow.com/5fbbeb5a2e59aa544f87d0bb/6036bd8ef3da6a4bb2e24382_facebook_10%25.png)](https://www.facebook.com/strongkeyinc/) #### Subscribe to Our Newsletter Receive helpful information and the latest news from the world of cybersecurity