The FTC on Monday released a staff , offering 鈥渂est practices for common uses of facial recognition technologies.鈥 The report resulted from a workshop the agency held on the issue last year. Face recognition is in some ways the ultimate biometric identifier, and its potential to finally and decisively put an end to the possibility of anonymity in public is very real.
The FTC report offers a useful rundown of the range of possible uses for the technology, including:
- Face detection (locate a face in a photo)
- Mood or expression analysis (are you worried or relaxed?)
- Demographic analysis (what is your age range or sex?)
- Identification (who are you or have we seen you before?)
Obviously it鈥檚 identification that raises most of the privacy issues. The New York Times ran a Monday on a new legal challenge to a New York law banning the wearing of masks at protests. Believe it or not, in New York it is illegal for three or more people to wear masks in public. The article doesn鈥檛 mention face recognition, but if the technology enters into broader use such laws will take on much more importance.
The FTC recommends that companies using face recognition 鈥渄esign their services with privacy in mind.鈥 Specifically:
- Provide good security for images and other biometric data, including measures to prevent unauthorized scraping of images for uses not authorized by the subject.
- Establish 鈥渁ppropriate retention and disposal practices鈥 for consumer images, such as disposing of data that is no longer needed.
- 鈥淐onsider the sensitivity of information鈥 when developing products鈥攆or example not putting cameras in sensitive areas such as bathrooms or places where children congregate.
- Provide consumers with simplified and transparent choices. Companies deploying signs that utilize cameras (as in Minority Report), for example, 鈥渟hould provide clear notice to consumers that the technologies are in use, before consumers come into contact with the signs.鈥 Social networks should provide clear notice and meaningful control including the ability to opt out and delete data.
- Obtain a consumers 鈥渁ffirmative express consent鈥 before a) using his or her image 鈥渋n a materially different manner than they represented when they collected the data,鈥 or b) to 鈥渋dentify anonymous images of a consumer to someone who could not otherwise identify him or her,鈥 such as a stranger in a bar.
All good guidelines, though of course as the report itself notes, none of it is binding unless a company promises to do one thing and then does another (at which point the agency鈥檚 authority to police 鈥渦nfair or deceptive trade practices鈥 kicks in).
More fundamentally, the FTC鈥檚 guidelines do not reach to the heart of the issue, which is whether the de facto anonymity that most people have enjoyed in urban areas since the dawn of industrialism will come to an end through the use of face recognition technology and ever-more-pervasive video surveillance cameras to routinely record everyone鈥檚 comings and goings.