Data privacy and legal experts are sounding the alarm over the unregulated expansion of facial recognition technology across the UK, particularly as its use broadens from police forces to private businesses. A new report by the Ada Lovelace Institute details the fragmented and insufficient state of biometrics governance, identifying serious legal deficiencies and ambiguities surrounding current surveillance practices. The independent institute is urging Prime Minister Keir Starmer’s administration to introduce a dedicated regulatory framework to clarify how facial recognition and related technologies should be lawfully used.
The report states that nearly five million faces were scanned by UK police in the past year, resulting in over 600 arrests. Yet the legal basis for such surveillance remains unclear due to what experts describe as a highly fragmented framework. The widespread adoption of artificial intelligence-powered facial recognition now extends to retailers, supermarkets, and sports stadiums, with privacy groups warning that these deployments are taking place in a ‘legislative void.’ Critics argue this leaves the UK trailing behind other democracies, with countries in the European Union and several US states having already implemented bans or significant limitations on live facial recognition use in public spaces. In contrast, UK retailers such as Asda, Southern Co-op, and Budgens are increasingly leveraging this technology to address theft and aggression, sometimes through data-sharing initiatives like Project Pegasus.
The growing concerns over the accuracy and civil liberties implications of facial recognition, including reported instances of innocent people being wrongly flagged as criminals, have found resonance at the highest levels of government. While facial recognition is currently covered under general human rights and data protection laws, ministers now acknowledge that these regulations may be outdated and ill-equipped to handle the specific risks associated with advanced biometrics and emotion-detecting systems. The Ada Lovelace Institute calls for risk-based, sector-wide legislation, enforcement by an independent regulatory body, and the establishment of binding codes of practice. Campaigners and experts alike argue that the urgency of these regulatory shortcomings demands swift government intervention, as the proliferation of emerging biometric surveillance technologies continues to outpace existing legal protections.
