the link between biometrics and PII needs careful management

https://www.technologyreview.com/2021/08/30/1033941/afghanistan-biometric-databases-us-military-40-data-points/

My takeaway: Instead of putting PII and biometrics in the same database, we
need to put them in different places, but prove that there's a link between
the holder of a biometric cred and the holder of other PII. I see companies
like iRespond doing this, but I also seem some biometric applications that
are more troubling.