In recent years’ technological development, biometric technologiessuch as face recognition, fingerprint unlocking and iris recognition havegradually come into public life. These technologies are based on the individual’sbiometric characteristics for identity verification, and this information, whichis closely related to the individual’s body, is called biometric information. Inthe context of Web 3.0, the wide application of biometric information hasbrought convenience to our lives, but the risks in its processing should notbe ignored. Therefore, it is particularly important to review the protectionof biometric information. This paper clarifies the contextual meaning ofbiometric information in China through a comparative study of the definitionof biometric information, focuses on the risks in the processing of biometricinformation, as well as the status quo and deficiencies in the protection ofbiometric information in China’s current laws. Finally, this paper puts forwardsuggestions for the legal protection of biometric information, calling for theestablishment of systematic laws on biometric information, standardisationof the rules for knowing biometric information, and strictness of the rules forconsenting to biometric information, in order to more effectively avoid the risksin the use of biometric information.