The UK Information Commissioner’s Office (ICO) has launched a new strategy focused on the regulation of artificial intelligence and biometrics technologies. Titled “Preventing harm, promoting trust: our AI and biometrics strategy”, the initiative outlines how the ICO intends to safeguard individual rights while enabling responsible innovation in fast-moving technology sectors.
Regulatory Focus on AI, Biometrics, and Facial Recognition
The strategy identifies several regulatory priorities, including the creation of a statutory code of practice for developers and users of AI systems, new guidance for police use of facial recognition, and frameworks to oversee automated decision-making. These measures come at a time of growing investment in facial recognition technologies by UK police forces. In May, law enforcement leaders proposed a £220 million annual budget to expand facial recognition and other digital policing tools, raising concerns among civil liberties advocates about the need for oversight and accountability.
Information Commissioner John Edwards emphasized the importance of transparency and safeguards. “People expect to understand when and how AI systems affect them, and they are worried about the consequences when these technologies go wrong – such as being incorrectly identified by facial recognition, or losing a job opportunity through erroneous automated decision-making,” he said at the strategy launch. The ICO has indicated that it will provide detailed guidance and conduct regular audits to ensure that biometric and AI systems meet data protection standards and operate fairly.
Addressing Emerging Risks and Public Trust
The strategy takes aim at several high-risk areas within AI development, including bias in automated decision-making systems and the lack of mechanisms for redress when individuals are negatively affected. It also addresses transparency obligations under existing laws such as the General Data Protection Regulation (GDPR), where prior ICO enforcement actions have set precedent. The new framework builds on those earlier efforts while explicitly expanding the ICO’s regulatory posture in the face of evolving technologies.
In a forward-looking move, the ICO’s strategy also acknowledges new areas of concern such as “agentic AI” and “emotion inference” systems. These technologies, which attempt to detect or respond to human emotional states or operate with a high degree of autonomous agency, are gaining traction across sectors ranging from financial services to public administration. The ICO plans to monitor these developments closely and may issue additional guidance as the use cases mature.
The strategy underscores that the same core principles of data protection continue to apply regardless of the technologies in use. As Edwards stated, “Trust matters, and it can only be built by organisations using people’s personal information responsibly. Public trust is not threatened by new technologies themselves, but by reckless applications of these technologies outside of the necessary guardrails.”
With its new strategy, the ICO aims to balance technological progress with strong regulatory guardrails. The framework signals a proactive effort to build a rights-respecting foundation for the use of AI and biometrics across the UK’s public and private sectors.
Sources: ComputerWeekly.com, Identity Week, NTN
—
June 6, 2025 – by the ID Tech Editorial Team
