The UK Home Office has published its data protection impact assessment (DPIA) for live facial recognition technology, including software, hardware and associated operational processing.
Per the government website, it “details the steps taken by Immigration Enforcement to evaluate and reduce the data protection risks of live facial recognition, fulfilling UK GDPR accountability requirements and demonstrating compliance.”
The 63-page document lists the questions organizations must ask when deploying live FRT, addressing issues such as purpose, scope and details about data processing methods.
These include only using Home Office-verified live facial recognition systems (NEC) with human in the loop and secondary ID checks, pre-deployment public engagement, strict scope control, and a number of technical measures.
Deployments must pursue a legitimate aim as defined by law, to fight crime or enforce immigration policy, “where strict safeguards are in place to ensure compliance with data protection and human rights obligations.