This paper sheds light on the challenges that the EU data protection rules pose to the constitution and the use of large-scale biometric datasets for research purposes. The paper analyses the GDPR (General Data Protection Regulation) rules applicable to research and explains their inadequacy for the constitution of large ...