Global data privacy regulators set resolution on facial recognition at annual meeting
Data privacy regulators from around the world have agreed to a resolution that personal information should be used for facial recognition only in accordance with a set of six principles.
More than 120 data protection authorities met for the 44th Global Privacy Assembly (GPA) in Istanbul, Türkiye. The four-day event was held under the theme of ‘A matter of balance – Privacy in the era of rapid technological advancement.’
Facial recognition should be deployed only on a clear legal basis, they say, with the deploying organization establishing its reasonableness, necessity and proportionality. Human rights assessments should be carried out, and the use of the biometric technology should be transparent to affected groups and individuals. Finally, the resolutions state that facial recognition should be used with clear and effective accountability mechanisms, and with respect for data protection principles.