Facial Recognition: How It Works, Who’s Watching, Rights

Facial recognition is a type of face recognition AI that turns your face into a “biometric” identifier (a measurable body feature) and tries to match it to photos or databases. The big ethical concern is that facial recognition technology can enable mass surveillance, make biased mistakes, and put people at risk—often without consent or notice.

• What is facial recognition?
• How does facial recognition work?
• Facial recognition issues: why it matters in daily life
• Facial recognition bias and wrongful arrests (real cases)
• Who’s watching: police, stores, and facial recognition apps
• Is facial recognition legal? Laws, bans, and the EU AI Act
• Is facial recognition safe? Biometric privacy concerns
• What you can do: rights, pressure points, and safer choices
• Facial recognition and Section 702 surveillance
• FAQ

What is facial recognition?

Facial recognition is software that analyzes an image of a face and compares it to other images to find a match (or a “possible match”). When people say “face recognition AI,” they usually mean machine-learning systems trained on huge numbers of face photos to recognize patterns and similarities.

In practice, facial recognition systems are used for things like unlocking phones, verifying identity, searching for a person in a photo database, or scanning crowds with live cameras. The market is large and growing: the global facial recognition market was worth $8 billion in 2025 and is projected to reach $13 billion by 2029.

It’s helpful to separate two common uses:

• Verification (1:1): “Is this person the same as this ID photo?”
• Identification (1:many): “Who is this person?” by searching a database.

How does facial recognition work?

Most facial recognition technology follows the same basic pipeline: detect a face, measure it, and compare it. The exact math varies by vendor, but the steps are fairly consistent.

Step-by-step: what facial recognition systems actually do

1. Face detection: The system locates a face in an image (or video frame).
2. Normalization: It tries to standardize the face—angle, lighting, size—so comparisons are “fairer.”
3. Feature encoding: It converts the face into a numeric representation (often called a faceprint or embedding). This is what gets stored and compared.
4. Comparison and scoring: It compares your faceprint to stored faceprints and produces similarity scores.
5. Decision: A system (or a human) sets a threshold: above it, it’s a “match”; below it, “no match.”

That last step is where a lot of real-world harm happens. If a threshold is set too low, the system produces more false positives (wrong matches). If it’s set too high, it misses matches. Neither outcome is harmless when police action, school discipline, or access to a job depends on it.

A quick comparison: phone unlock vs. police search

Not all facial recognition is equally risky. Here’s a plain-language comparison of common use cases and why the stakes are different.

• Unlocking a phone (verification): Typically a 1:1 check. You control the device, and the risk is mostly personal (someone gets into your phone).
• Police searching a database (identification): Typically 1:many. The system “suggests” people, and the risk can be arrest, jail time, or worse.
• Live facial recognition in public: Continuous scanning of passersby. The risk becomes broad surveillance and chilling effects on daily life.

Facial recognition issues: why it matters in daily life

People usually start caring about facial recognition ethics when they realize the tool isn’t just “a better security camera.” It’s a way to identify people at scale, often without their knowledge.

The most cited problems with facial recognition fall into a few buckets:

• Mass surveillance: If cameras can identify people in real time, you can track who goes to a protest, a clinic, a place of worship, or a union meeting. That can chill free assembly and expression.
• No consent, no notice: In many deployments, people are scanned without being told.
• Algorithmic bias: Errors aren’t evenly distributed; some groups face higher misidentification risk.
• Biometric data privacy: If a password leaks, you change it. If your face data leaks, you can’t change your face.

If you want a broader picture of how these harms show up in the real world, Ban the Bots tracks patterns and examples at /ai-incidents/.

Facial recognition bias and wrongful arrests (real cases)

Facial recognition bias isn’t a theoretical issue. It has been connected to real wrongful arrests in the United States.

As of 2026, at least 14 people in the US have been wrongfully arrested due to facial recognition false positives—and all publicly confirmed cases involve Black people. That’s a hard, human measure of what “false positive” can mean when a computer match is treated like a lead that “must be right.”

Robert Williams (Detroit, 2020)

In 2020, Robert Williams was wrongfully arrested after facial recognition matched his expired driver’s license photo to surveillance footage of a shoplifter. He was not near the store.

The case became a landmark not only because it was widely documented, but because of what happened later: it settled in June 2024 with policy changes at the Detroit Police Department. Importantly, this was reported as the first settlement in the US requiring police facial recognition policy reform.

Porcha Woodruff (Detroit, 2023)

In 2023, Porcha Woodruff was wrongfully arrested while eight months pregnant after facial recognition matched her to a carjacking suspect. A key detail underscores how blunt these systems can be when used carelessly: the actual perpetrator was not visibly pregnant.

What research says about demographic performance

A National Academies of Sciences report (2024) found facial recognition accuracy varies significantly across demographic groups and is least accurate on darker-skinned faces and women. When accuracy drops for certain groups, it increases the risk of wrongful targeting—especially in high-stakes uses like law enforcement identification and watchlists.

Who’s watching: police, stores, and facial recognition apps

When people ask “Who’s watching?” they usually mean three overlapping worlds: law enforcement, public-space camera networks, and private companies (including retailers and apps).

Police and public cameras (including live facial recognition)

Live facial recognition uses cameras in public places to scan faces in real time and compare them to watchlists. One concrete example of the scale: London’s Metropolitan Police scanned approximately 1 million faces in 2025 using live facial recognition cameras.

In the UK, even senior officials have acknowledged the governance gap. The UK Home Secretary said in July 2025 the UK needs “a proper, clear governance framework” for facial recognition—and that such a framework does not yet exist. That matters because “rules later” is exactly how surveillance tools become normalized before the public can meaningfully consent or object.

Stores and “does Walmart use facial recognition?”

A very common search is: does Walmart use facial recognition? Here’s the careful, evergreen answer: big retailers use a mix of security tools—cameras, analytics, and sometimes biometric tools—but whether facial recognition is used can vary by location, vendor, and time, and it’s often not publicly transparent. The bigger issue for shoppers is this: you may not be told what biometric surveillance is in use, and you typically can’t negotiate the terms just to buy groceries.

If you’re concerned about retail surveillance, a practical step is to look for posted notices at entrances and read store privacy policies. Another is to push your city or state for clear rules (see the legal section below) so the burden isn’t on individual shoppers to investigate.

Facial recognition app risks

A facial recognition app can range from harmless (sorting your own photo library) to risky (building a searchable database of strangers’ faces). The ethical red flags are consistent: unclear consent, unclear retention, unclear sharing, and unclear security.

Even when an app feels optional, its outputs can affect people who never agreed—because if your friend uploads a photo, your face can be processed too.

Is facial recognition legal? Laws, bans, and the EU AI Act

Whether facial recognition is legal depends heavily on where you live and who is using it. One of the biggest realities right now is uneven protection: strong rules in some places, almost none in others.

United States: no federal law (as of 2026), patchwork local bans

As of 2026, the United States has no federal facial recognition law. Instead, protections come from a mix of local bans and state biometric privacy laws.

• Nearly two dozen states have passed biometric privacy laws.
• At least 16 cities have banned police use of facial recognition, including San Francisco, Boston, and Portland.
• Milwaukee became the latest city to ban police facial recognition in February 2026 after public outcry.

This patchwork matters for everyday rights. In a city with a police-use ban, you have a different baseline expectation than in a city where police can run face searches with minimal transparency.

For readers thinking “I didn’t vote on this,” you’re not imagining it: many deployments happened through procurement decisions, not public referendums. If you want to get involved in the policy side, Ban the Bots maintains practical steps at /fighting-back/.

European Union: the EU AI Act draws a bright line

The EU AI Act, fully applicable from August 2, 2026, takes a much firmer stance on certain uses. It prohibits real-time facial recognition in public spaces by law enforcement, with narrow exceptions. It also classifies mass facial recognition databases as “unacceptable risk” AI.

If you want a readable walkthrough of what the EU law does (and doesn’t) do, see /explainers/eu-ai-act.

Why bans focus on police use

Some people ask: why ban facial recognition instead of “improving accuracy”? Because accuracy doesn’t solve the core civil liberties problem of constant identification in public. And even “pretty accurate” systems can be dangerous when used as a shortcut to suspicion.

Is facial recognition safe? Biometric privacy concerns

“Safe” depends on what you mean: safe from hacking, safe from misuse, safe from discrimination, or safe for democracy. Facial recognition software can fail on all four.

Key biometric data privacy risks (and why they’re different)

• Irreplaceability: You can change a password. You cannot change your face.
• Function creep: A system bought for “security” can quietly expand into attendance tracking, blacklist enforcement, or political monitoring.
• Chilling effects: If people think they’ll be identified and logged, they may avoid protests, meetings, or sensitive locations.
• Breach consequences: A breach of faceprints (or linked identity data) can expose people for life.

Facial recognition ethics: the human questions behind the tech

Facial recognition ethics isn’t just about whether an algorithm is “biased.” It’s also about power: who gets to identify whom, under what rules, and with what accountability when it goes wrong.

Ask these ethics questions whenever you see facial recognition proposed:

• Necessity: Is facial recognition the least intrusive way to solve the problem?
• Consent and notice: Are people clearly told, and can they opt out?
• Accountability: What happens when it misidentifies someone?
• Independent oversight: Is there a real audit trail and public reporting?

Anti facial recognition mask, glasses, and makeup: what they can (and can’t) do

Searches for “anti facial recognition mask,” “anti facial recognition glasses,” and “anti facial recognition makeup” are really searches for control: people want a way to move through public life without being turned into a trackable ID.

Here’s the reality in plain terms:

• They may reduce matching in some situations (especially if they block key facial regions or change how cameras see your features).
• They are not a guaranteed shield, because systems adapt and because humans can still identify you.
• They can create social and legal risk depending on local rules about face coverings and the context (e.g., security checkpoints).

The more reliable fix is policy: limits on deployment, limits on retention, and bans on high-risk uses—especially real-time public surveillance.

What you can do: rights, pressure points, and safer choices

You shouldn’t need to be a privacy expert to protect yourself from biometric surveillance. Here are practical steps that match the world as it is: patchwork laws, limited transparency, and real harms.

1) Find out whether your city has a ban (and use it)

In the US, at least 16 cities have banned police use of facial recognition, including San Francisco, Boston, and Portland. Milwaukee banned police facial recognition in February 2026 after public outcry.

If you live in a city with a ban, you can:

• Ask your city council or police oversight body how they enforce compliance.
• Request public reporting on surveillance tech procurement.
• Document and report suspected violations through local oversight channels.

2) If you’re wrongfully arrested, treat it like an emergency civil-rights issue

If facial recognition contributes to an arrest, time matters. The research context here is clear: at least 14 wrongful arrests have been publicly confirmed, and all involved Black people.

Ban the Bots’ practical guidance: contact the ACLU if you are wrongfully arrested. Also preserve evidence: booking paperwork, any mention of “facial recognition,” body-cam disclosures, and timeline proof of where you were.

3) Push for clear rules (not vague “responsible use” promises)

Because the US lacks a federal law as of 2026, public pressure often matters at the city and state level. Support facial recognition legislation using the action steps at /fighting-back/.

If you’re evaluating proposed policies, look for hard requirements like:

• Ban or strict limits on real-time public facial recognition.
• Warrants and tight use restrictions for identification searches.
• Transparency reports and independent audits.
• Clear consequences for misuse.

4) Watch the bigger AI ecosystem (surveillance grows with infrastructure)

Facial recognition doesn’t exist alone; it rides on data centers, cameras, databases, and contracts. To understand the physical footprint behind AI systems, explore Ban the Bots’ data center map and the explainer on infrastructure impacts at /explainers/data-center-impact.

5) Track incidents and patterns so it’s not “your word vs. the system”

When harms stay isolated, institutions can frame them as rare mistakes. Tracking helps show patterns. You can follow documented examples at /ai-incidents/ and broader public response at /ai-backlash/.

Comparison: policy fixes vs. personal workarounds

• Personal workarounds (anti facial recognition glasses/makeup/mask): may help sometimes, but unreliable and puts the burden on individuals.
• Institutional safeguards (bans, audits, warrants, reporting): slower to win, but actually changes what systems can be deployed.

Facial recognition and government surveillance laws (Section 702)

Facial recognition rarely works alone. It is one tool inside a much larger government surveillance toolkit. A key law behind that toolkit is Section 702 of the Foreign Intelligence Surveillance Act.

Section 702 lets US agencies collect foreign communications without a warrant. Americans' messages often get swept up too. Congress reauthorized it in April 2024 through the RISAA law.

Section 702 covers communications, not faces directly. But agencies combine many databases. Facial recognition, license plate data, and intercepted messages can all point at the same person.

That is why privacy groups treat these systems as one problem. To see how vehicle tracking fits in, read our guide to automated license plate readers. For identity systems, see digital ID, and for ways to push back, visit fighting back.

FAQ

Is facial recognition banned in the US?

No nationwide ban exists. As of 2026 the US has no federal facial recognition law, but at least 16 cities have banned police use of facial recognition, including San Francisco, Boston, and Portland, and Milwaukee banned it in February 2026.

Does facial recognition work the same for everyone?

No. A National Academies of Sciences (2024) report found accuracy varies significantly across demographic groups and is least accurate on darker-skinned faces and women, which increases the risk of wrongful targeting.

Why do wrongful arrests happen if it’s “just a lead”?

Because “just a lead” can become the center of an investigation. The Robert Williams and Porcha Woodruff cases in Detroit show how a match can override common-sense checks—like location evidence or obvious physical differences.

What does the EU AI Act do about facial recognition?

The EU AI Act, fully applicable from August 2, 2026, prohibits real-time facial recognition in public spaces by law enforcement with narrow exceptions, and treats mass facial recognition databases as “unacceptable risk” AI.

What should I do if I think my city is using facial recognition on the street?

Start by checking whether your city has a ban on police use and asking local oversight bodies for procurement and policy documents. You can also track and report patterns via /ai-incidents/ and find organizing steps at /fighting-back/.

Conclusion: Facial recognition facial recognition ethics isn’t a niche tech debate—it’s about whether face recognition AI becomes a normal way to identify and track people in public, with known bias risks and real wrongful arrests. If you want to push back, start local (city/state rules and bans), document harms, and use Ban the Bots tools to take action: learn about related power shifts at /ai-layoffs/, join policy efforts at /fighting-back/, understand the infrastructure behind surveillance at /data-center-map/, see public response at /ai-backlash/, and follow accountability battles at /ai-lawsuits/.