Due to current Information Technology has changed rapidly. There are many ways to collect Personal Information. various purposes especially for data storage using Biometric Technology, including storing fingerprints, photographs, palms, iris, faces, speech, signatures, DNA, etc. So it's a huge challenge of government agencies and businesses, and may be at risk of infringing on privacy rights. Because, the Personal Data Protection Act of 2019 came into effect on June 1, 2022. The objectives of this article are: (1). To study the purpose of collecting personal data by using Biometric Technology, (2). To study and analyze the challenges of using Biometric Technology with dimensions of the Personal Data Protection Act of 2019, (3). To make the public know how to protect personal information and information security, and (4). To prevent individuals and organizations from committing illegal acts. After analyzing the study, it was concluded that government agencies and the business sector should only store personal data as needed and should have good security measures as well.