The UK government has indicated plans to introduce legislation regulating the use of facial recognition technology by law enforcement, responding to long-standing calls for clearer rules on biometric surveillance. This week, Lord Hanson of Flint, Minister of State at the Home Office, told the House of Lords that the Home Secretary “wants to see a clear legal framework” and that the government aims to set out proposals “very shortly.” No formal bill has yet been published.
Currently, police deployments of live facial recognition operate under general data protection laws and human rights principles, alongside non-binding guidance from the College of Policing. There is no single statutory law dedicated specifically to facial recognition, a legal gap that has prompted criticism from privacy advocates and legal experts. The Court of Appeal ruled in 2020 that South Wales Police’s trial use of live facial recognition technology breached privacy and equality laws, underscoring the need for a defined legal basis for such surveillance activities.
Growing Pressure for Legislative Clarity
Calls for consistent standards have intensified in recent months. In February 2025, the Biometrics Institute urged lawmakers to create unified regulations governing facial recognition both in policing and the private sector, citing concerns about transparency, accuracy, and bias.
The oversight landscape has also shifted. Francesca Whitelaw KC was appointed interim Biometrics Commissioner on July 1, 2025, filling a role that had been vacant since August 2024. The Commissioner is tasked with independently reviewing how police and intelligence agencies deploy biometric technologies, including live facial recognition systems.
The government’s intention to legislate comes amid wider debates on the use of technology in policing. MPs have recently proposed banning predictive policing algorithms over concerns about racial bias and human rights implications. Although separate from facial recognition, these discussions are politically linked through broader public worries about artificial intelligence and surveillance in law enforcement contexts.
Privacy Concerns and International Context
Privacy advocates remain critical of facial recognition systems, questioning their accuracy across different demographic groups and warning of potential overreach. For example, New South Wales Police in Australia discontinued its facial recognition program in February 2025 due to concerns about racial bias and algorithmic errors, highlighting that challenges with biometric surveillance are not unique to the UK.
Within the UK, existing College of Policing guidance advises that images of UK citizens captured by facial recognition systems be deleted within 31 days unless matched against a watch list, while watch-list images may be retained for up to 12 months. However, privacy groups argue that without a dedicated legal framework, oversight remains fragmented and insufficiently robust.
Internationally, the European Union adopted the AI Act in May 2025, which bans real-time facial recognition in public spaces except under narrowly defined law enforcement circumstances. The EU’s approach adds further pressure on the UK to clarify its own legal stance as it forges a post-Brexit regulatory path for emerging technologies.
Sources: MLex, PACCTS, Computer Weekly
–
By Ali Nassar-Smith
