Biometrics commissioners warn facial recognition tech needs oversight

The Biometrics and Surveillance Camera Commissioner for England and Wales, Professor William Webste, and the Scottish Biometrics Commissioner, Dr Brian Plastow, have warned that national oversight of AI-powered facial recognition technology (FRT) is failing to keep pace with its rapid expansion. In an exclusive for The Guardian, Professor Webster noted that legislation is lagging significantly behind the real-world rollout and could yet be three years away. Dr Plastow described the UK's legal framework as a patchwork that allows police to effectively mark their own homework.

The article highlights that the Metropolitan Police Service (MPS) has nearly doubled its use of FRT in London, scanning over 1.7 million faces so far this year, an 87% increase compared to the same period in 2025. Despite this growth, MPS requested an indefinite postponement of an independent audit by the Information Commissioner's Office (ICO), raising doubts about whether the audit will proceed. The situation has added to public backlash, with individuals mistakenly identified by FRT describing the ICO as unresponsive and "toothless". Meanwhile, Conservative MP David Davis is calling for the ICO to take a more proactive approach to protecting citizens' information rights.

Public concern is also mounting, with 57% of people viewing FRT as a move towards a surveillance society. Their concern is particularly relevant, as retailers, including major chains such as Sainsbury's and Sports Direct, increasingly adopt FRT systems from companies like Facewatch to address shoplifting. However, these commercial systems come with their own accountability issues. A former security guard alleged that staff sometimes maliciously added innocent members of the public to watchlists without any evidence of wrongdoing, leading to individuals being flagged across multiple stores.

In a related article, individuals wrongly identified describe a system where they feel guilty until proven innocent, with limited recourse for complaints. 

Training Announcement: Find out more about our range of independent accredited data protection and AI governance qualifications from IAPP and BCS that support practitioners in adopting emerging technologies such as facial recognition.