What are the legal boundaries in the use of databases and biometrics in border surveillance and migration policy? This chapter aims to reach a better understanding of the standards that are frequently neglected against the backdrop of current developments or whose importance is all too easily trivialized: the right to privacy, the principle of nondiscrimination and two substantive standards relating to data protection law: the purpose limitation principle and the prohibition on automated decision-making.