As we pass into the new year and consider all that happened in the IAPP community over the past 12 months I'm reminded that we live in a natural universe which is expanding at an ever-accelerating rate, and that it feels like this phenomenon is reflected in our own industries' evolution.
New data protection laws have come into being in many jurisdictions across the APAC region and wider world, artificial intelligence models have proliferated at dizzying rates and policy makers have done their best to keep up with this pace while also balancing stakeholders' economic and political aspirations.
While these topics dominated IAPP content and community conversations, the one topic that's caught my attention of late has been facial recognition technology. With its promises of enhanced security and streamlined convenience, facial recognition technology has become a powerful tool in both public and private sectors. But as it proliferates, so too do the ethical and privacy risks that accompany its widespread use.
On one side, facial recognition technology offers significant opportunities in productivity and security. In global airports, biometric screening is offering to speed up boarding processes, reducing wait times and making travel more efficient. In law enforcement, the technology is being used to aid in identifying suspects and deterring further criminal activity.
In a world where data breaches are an ever-present threat, facial recognition technology offers an alternative layer of protection, ensuring only authorized individuals can access sensitive information or facilities. The idea of using one's unique facial features as a password is enticing, as it removes the risks associated with traditional personal identification numbers or passwords, which can be forgotten, stolen or hacked. I employ this very technology to access my own mobile device and many apps.
Yet, the rapid deployment of facial recognition technology raises significant ethical and privacy concerns that cannot be overlooked. One of the most pressing issues is the potential for mass surveillance. Governments and private companies can track individuals in public spaces without their consent, or even their knowledge, leading to fears of a "Big Brother" society. In some countries, facial recognition technology is already being used to monitor political dissidents, activists and marginalized communities, heightening concerns about civil liberties and personal freedoms.
Another critical concern is the accuracy and bias of facial recognition systems. Studies have shown these systems are more likely to misidentify people of color, women, and younger or older individuals, leading to potential wrongful arrests or exclusion from services. This introduces a troubling dimension to facial recognition technology's use in law enforcement, where errors can have dire consequences. The lack of regulation around these systems exacerbates the problem, leaving vulnerable populations at risk.
Moreover, facial recognition technologies are susceptible to data breaches themselves. While facial recognition promises to secure identity verification, the vast amounts of personal data it collects — such as facial images, biometric patterns and location histories — are valuable targets for hackers. If breached, this data could be used maliciously, and unlike passwords, our faces cannot be easily changed or reset.
Recently, Privacy Commissioner of Australia Carly Kind said facial recognition technology "and the surveillance it enables, has emerged as one of the most ethically challenging new technologies in recent years. We acknowledge the potential for facial recognition technology to help protect against serious issues, such as crime and violent behaviour. However, any possible benefits need to be weighed against the impact on privacy rights, as well as our collective values as a society."
It appears tests, such as whether use of facial recognition technology is reasonable in given circumstances and proportional to the potential risks or harms, will need to be tested and debated before we reach any consensus.
Adam Ford is the managing director, Australia, New Zealand, for the IAPP.
