EDPB adopts final version of Guidelines on facial recognition technology in the area of law enforcement

estimated reading time: < 1 min

Following public consultation, the EDPB has adopted a final version of its Guidelines on facial recognition technology in the area of law enforcement. The guidelines provide guidance to EU and national lawmakers, as well as to law enforcement authorities, on implementing and using facial recognition technology systems.

Among others, the guidelines stress that facial recognition tools should only be used in strict compliance with the Law Enforcement Directive (LED). Moreover, such tools should only be used if necessary and proportionate, as laid down in the Charter of Fundamental Rights. In the guidelines, the EDPB repeats its call for a ban on the use of facial recognition technology in certain cases, as it had requested in the EDPB-EDPS joint opinion on the proposal for an Artificial Intelligence Act.

Following public consultation, the guidelines were updated and further clarifications were added.

Guidelines 05/2022 on the use of facial recognition
technology in the area of law enforcement
Version 2.0
Adopted on 26 April 2023

Table of content
Executive summary ................................................................................................................5
1
Introduction ...................................................................................................................8
2
Technology ....................................................................................................................9
2.1
One biometric technology, two distinct functions .........................................................9
2.2
A wide variety of purposes and applications ............................................................... 10
2.3
Reliability, Accuracy and risks for data subjects ........................................................... 12
3
Applicable legal framework ............................................................................................ 13
3.1
General legal framework – The EU Charter of Fundamental Rights and the European
Convention on Human Rights (ECHR)................................................................................... 14
3.1.1
Applicability of the Charter ............................................................................... 14
3.1.2
Interference with the rights laid down in the Charter............................................ 14
3.1.3
Justification for the interference........................................................................ 15
3.2
Specific legal framework – the Law Enforcement Directive ........................................... 19
3.2.1
Processing of special categories of data for law enforcement purposes ................... 20
3.2.2
Automated individual decision-making, including profiling .................................... 22
3.2.3
Categories of the data subjects ......................................................................... 23
3.2.4
Rights of the data subject ................................................................................. 23
3.2.5
Other legal requirements and safeguards ........................................................... 26
4
Conclusion ................................................................................................................... 29
5
Annexes....................................................................................................................... 29
Annex I - Template for description of scenarios ........................................................................ 31
Annex II- Practical guidance for managing FRT projects in LEAs ................................................... 33
1.
ROLES AND RESPONSIBILITIES ......................................................................................... 33
2.
INCEPTION/BEFORE PROCURING THE FRT SYSTEM ............................................................. 34
3.
DURING PROCUREMENT AND BEFORE DEPLOYMENT OF THE FRT ........................................ 36
4.
RECOMMENDATIONS AFTER DEPLOYMENT OF THE FRT...................................................... 37
Annex III - PRACTICAL EXAMPLES............................................................................................ 39
1
Scenario 1 .................................................................................................................... 39
1.1.
Description..................................................................................................... 39
1.2.
Applicable legal framework............................................................................... 40
1.3.
Necessity and proportionality - purpose/seriousness of crime ............................... 40
1.4.
Conclusion ..................................................................................................... 41
2
Scenario 2 .................................................................................................................... 41
2.1.
Description..................................................................................................... 41
4
Adopted
2.2.
Applicable legal framework............................................................................... 42
2.3.
Necessity and proportionality - purpose/seriousness of crime/number of persons not
involved but affected by processing ................................................................................. 42
2.4.
Conclusion ..................................................................................................... 43
3
Scenario 3 .................................................................................................................... 43
3.1.
Description..................................................................................................... 43
3.2.
Applicable legal framework............................................................................... 44
3.3.
Necessity and proportionality ........................................................................... 44
3.4.
Conclusion ..................................................................................................... 45
4
Scenario 4 .................................................................................................................... 46
4.1.
Description..................................................................................................... 46
4.2.
Applicable legal framework............................................................................... 46
4.3.
Necessity and proportionality ........................................................................... 47
4.4.
Conclusion ..................................................................................................... 47
5
Scenario 5 .................................................................................................................... 47
5.1.
Description..................................................................................................... 47
5.2.
Applicable legal framework............................................................................... 48
5.3.
Necessity and proportionality ........................................................................... 48
5.4.
Conclusion ..................................................................................................... 51
6
Scenario 6 .................................................................................................................... 51
6.1.
Description..................................................................................................... 51
6.2.
Applicable legal framework............................................................................... 52
6.3.
Necessity and proportionality ........................................................................... 52
6.4.
Conclusion ..................................................................................................... 52