Facial Recognition & Biometric Mass Surveillance: Document Pool

Despite evidence that public facial recognition and other forms of biometric mass surveillance infringe on a wide range EU fundamental rights, European authorities and companies are deploying these systems at a rapid rate. This has happened without proper consideration for how such practices invade people's privacy on an enormous scale; amplify existing inequalities; and undermine democracy, freedom and justice.

By EDRi · March 25, 2020

Most European countries have experimented with highly intrusive facial and biometric recognition systems in ways that lead to mass surveillance, and many have deployed it in either pilot or full deployment phases. Considering the high risk of abuse, discrimination and violation of fundamental rights to privacy and data protection, the EU and its Member States must develop a strong, privacy-protective approach to all forms of biometric surveillance. This includes prohibiting biometric mass surveillance and other biometric surveillance practices that unduly restrict people’s rights.

Deploying remote biometric identification in publicly accessible spaces means the end of anonymity in those places. Applications such as live facial recognition interfere with fundamental rights and freedoms to such an extent that they may call into question the essence of these rights and freedoms. [...] A general ban on the use of facial recognition in publicly accessible areas is the necessary starting point if we want to preserve our freedoms and create a human-centric legal framework for AI.

In this document pool we will be listing relevant articles and documents related to facial recognition and other forms of biometric mass surveillance. This will allow you to follow the developments of measures and regulatory actions in Europe.

EDRi’s analysis and recommendations
EDRi members’ actions and reporting
EDRi’s blogposts and press releases
Key dates and official documents
Guidance from data protection authorities
Other useful resources

1. EDRi’s analysis and recommendations

4. Key dates* and official documents

European Parliament
- 2021/0106(COD) – Artificial Intelligence Act [ordinary legislative procedure] (Parliament texts expected from Q3/4 2021 onwards)
  - IMCO Committee, rapporteur Brando Benifei (S&D)
  - Follow the procedure

- 2020/2016(INI) – Artificial intelligence in criminal law and its use by the police and judicial authorities in criminal matters [own-initiative report] (adopted 29.06.2021) (awaiting final text)
  - LIBE Committee, rapporteur Petar Vitanov (S&D)
  - Follow the procedure
- 2020/2021(INL) – Framework of ethical aspects of artificial intelligence, robotics and related technologies [legislative initiative] (adopted 20.10.2021)
  - JURI Committee, rapporteur Ibán García Del Blanco (S&D)
  - Follow the procedure

European Commission
- Proposal for a REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL LAYING DOWN HARMONISED RULES ON ARTIFICIAL INTELLIGENCE (ARTIFICIAL INTELLIGENCE ACT) AND AMENDING CERTAIN UNION LEGISLATIVE ACTS (COM/2021/206 final) [legislative] (21.04.2021)
  - Press release: “Europe fit for the Digital Age: Commission proposes new rules and actions for excellence and trust in Artificial Intelligence” (21.04.2021)
  - Public consultation on Commission Adoption (26.04.2021 – 06.08.2021)
  - Leaked draft 1 (January 2021)
  - Leaked draft 2 (13.04.2021)
- Coordinated Plan on Artificial Intelligence 2021 Review (21.04.2021)
- Communication on Fostering a European approach to Artificial Intelligence (21.04.2021)
- White Paper on Artificial Intelligence (19.02.2020) [non-legislative]
  - Leaked draft 1 (12.01.2020)
  - Leaked draft 2 (21.01.2020)
  - Public consultation on White Paper on Artificial Intelligence (19.02.2020 – 31.05.2020)
- A Strategy for Europe – Fit for the Digital Age (19.02.2020) [non-legislative]
- Communication: Building Trust in Human Centric Artificial Intelligence (08.04.2019)

European Data Protection Board (EDPB)
- Guidelines 3/2019 on processing of personal data through video devices (29.01.2020)
- European Data Protection Supervisor (EDPS) and European Data Protection Board (EDPB): “EDPS – EDPB Joint Opinion on the proposal for a Regulation of the European Parliament and of the Council laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)” (18.06.2021)

5. Guidance and press releases from data protection authorities

Pan-European authorities:

European Data Protection Supervisor (EDPS): “EDPB & EDPS call for ban on use of AI for automated recognition of human features in publicly accessible spaces, and some other uses of AI that can lead to unfair discrimination” (18.06.2021)
European Data Protection Supervisor (EDPS): “14 misunderstandings with regard to biometric identification and authentication” (24.06.2020)
European Data Protection Supervisor (EDPS): “The moment you realise the world has changed: re-thinking the EDPS Strategy” (20.03.2020)
European Data Protection Supervisor (EDPS): “AI and Facial Recognition: Challenges and Opportunities” (21.02.2020)
European Data Protection Supervisor (EDPS): “Facial recognition: A solution in search of a problem?” (28.10.2019)

National authorities (oldest – newest):

UK Information Commissioners’ Office (ICO): “In the picture: A data protection code of practice for surveillance cameras and personal information” (09.06.2017)
Italy Garante per la Protezione Dei Dati Personali: “Verifica preliminare. Sistema di rilevazione delle immagini dotato di un software che permette il riconoscimento della persona” (15.03.2018) [facial recognition for queue management at Rome airport]
Italy Garante per la Protezione Dei Dati Personali: “Sistema automatico di ricerca dell’identità di un volto” (26.07.2018) [facial recognition for criminal surveillance]
German Datenschutzkonferenz (DSK): “Positionspapier zur biometrischen Analyse” [biometric position paper] (April 2019)
Denmark Datatilsynet: “Danish DPA approves automated Facial Recognition” (19.06.2019)
UK Information Commissioners’ Office (ICO): “Statement: Live facial recognition technology in King’s Cross” (15.08.2019)
Sweden Datainspektionen: “Facial recognition in school renders Sweden’s first GDPR fine” (22.08.2019)
UK Information Commissioners’ Office (ICO): “Blog: Live facial recognition technology – police forces need to slow down and justify its use” (October 2019)
Sweden Datainspektionen: “Polisen får använda ansiktsigenkänning för att utreda brott” (24.10.2019) [facial recognition for criminal surveillance]
France CNIL: “Expérimentation de la reconnaissance faciale dans deux lycées : la CNIL précise sa position” (29.10.2019) [facial recognition in two schools]
UK Information Commissioners’ Office (ICO): “ICO investigation into how the police use facial recognition technology in public places” (31.10.2019)
France CNIL: “Facial recognition: for a debate living up to the challenges” (15.11.2019)
Poland Urząd Ochrony Danych Osobowych: “Fine for processing students’ fingerprints imposed on a school” (05.03.2020)
Italy Garante per la Protezione Dei Dati Personali: “Riconoscimento facciale: Sari Real Time non è conforme alla normativa sulla privacy” (16.04.2021)
UK Information Commissioners’ Office (ICO): “Information Commissioner’s Opinion addresses privacy concerns on the use of live facial recognition technology in public places” (18.06.2021)

6. Other useful resources

EU Fundamental Rights Agency: “Facial recognition technology: fundamental rights considerations in the context of law enforcement” (27.11.2019)
EU Fundamental Rights Agency: “Under watchful eyes – biometrics, EU IT-systems and fundamental rights” (27.03.2018)
European Network Against Racism (ENAR): “Data-Driven Policing: The Hardwiring of Discriminatory Policing Practices across Europe” (05.11.2019)
“Bots at the Gate: A Human Rights Analysis of Automated Decision-Making in Canada’s Immigration and Refugee System” (16.08.2018)
Scottish Biometrics Commissioner: “Parliament backs plan for oversight of police use of biometric data“ (10.03.2020)
AI Now Institute: “AI Now Report 2018” (December 2018)
Liberty Human Rights: “Resist Facial Recognition” (various dates)
“Declaration: A Moratorium on Facial Recognition Technology for Mass Surveillance Endorsements” (October 2019)
Ada Lovelace Institute: “Facial recognition: defining terms to clarify challenges” (13.11.2019)
ADC por los Derechos Civiles: “ConMiCaraNo: Reconocimiento facial en la Ciudad de Buenos Aires” (date unknown)
AlgorithmWatch: “At least 10 police forces use face recognition in the EU, AlgorithmWatch reveals” (11.12.2019)
Georgetown Law center on Privacy & Technology: “The Perpetual Line-Up: Unregulated police facial recognition in America” (18.10.2016)
American Civil Liberties Union (ACLU): Reporting on face recognition in the US (various dates)
Scottish Parliament: “Facial Recognition: How Policing in Scotland makes use of this technology” (11.02.2020)
Scottish Parliament Justice Sub-Committee on Policing: Video – EDRi member ORG gives evidence (05.12.2019)

* subject to change

This document pool was last updated on 5 July 2021.

Search

Facial Recognition & Biometric Mass Surveillance: Document Pool

Contents

1. EDRi’s analysis and recommendations

2023

2022

2021

2020

2. EDRi members’ actions and reporting

3. EDRi’s blogposts and press releases
2021 onwards

2020

Pre-2020

4. Key dates* and official documents

5. Guidance and press releases from data protection authorities

6. Other useful resources

Facial Recognition & Biometric Mass Surveillance: Document Pool

Contents

1. EDRi’s analysis and recommendations

2023

2022

2021

2020

2. EDRi members’ actions and reporting

3. EDRi’s blogposts and press releases 2021 onwards

2020

Pre-2020

4. Key dates* and official documents

5. Guidance and press releases from data protection authorities

6. Other useful resources

3. EDRi’s blogposts and press releases
2021 onwards