Police use of facial recognition ‘unjustifiable’, says Scottish Justice Committee

Public consent for LFR

The committee said Police Scotland must also demonstrate that there is public consent for its use of the technology, “as a lack of public consent risks undermining the legitimacy of the technology and, potentially, public confidence in policing”.

It added: “The use of live facial recognition technology would be a radical departure from Police Scotland’s fundamental principle of policing by consent.”

According to a national study released by the Ada Lovelace Institute in September 2019, people have mixed feelings about the use of LFR.

Almost half (46%) wanted the ability to opt out, a figure that is higher for people from ethnic minority backgrounds (56%), while 55% wanted the government to impose restrictions on police use of the technology. The vast majority of people surveyed (77%) also did not trust private companies to use the technology ethically.

The committee also expressed concern over the use of LFR by private companies, citing the sharing of custody images between the Metropolitan Police Service, British Transport Police and the King’s Cross Estate Development Company as an example.

It suggested that any new legislation developed to govern the use of LFR technology should also cover private companies in order to hold them to the same standard.

“Whether this technology is being used by private companies, public authorities or the police, the Scottish government needs to ensure there is a clear legal framework to protect the public and police alike from operating in a facial recognition Wild West,” said sub-committee convener John Finnie.

“The sub-committee is reassured that Police Scotland has no plans to introduce live facial recognition technology at this time. It is clear that this technology is in no fit state to be rolled out or indeed to assist the police with their work.”

Lack of legal frameworks

In December 2019, the justice sub-committee backed a bill that would create a dedicated biometrics commissioner for Scotland and establish a statutory code of practice for the use of biometric data by Scottish police.

In November, the Information Commissioner’s Office (ICO) also called for a statutory code of practice to govern how UK police deploy facial recognition technology, saying the lack of one contributes to inconsistent practice, increases the risk of compliance failures, and damages public confidence in the technology.

In his 2019 annual report, Wiles noted the lack of a legislative framework and clear laws governing the development of biometric databases.

“There is nothing inherently wrong with hosting a number of databases on a common data platform with logical separation to control and audit access, but unless the governance rules underlying these separations are developed soon, then there are clear risks of abuse,” he said.

According to the Scottish justice sub-committee, a number of individuals and organisations expressed the need for a moratorium on the technology in their submitted evidence.

One example is Tatora Mukushi, a legal officer at the Scottish Human Rights Commission, who said that if human rights and data protection standards cannot be built into the design of the technology, then it should not be introduced at all.

In July 2019, the UK’s Science and Technology Committee called on the government to issue a moratorium on the use of LFR, saying: “No further trials should take place until a legislative framework has been introduced and guidance on trial protocols, and an oversight and evaluation system, has been established.”

The European Commission is currently considering banning the use of LFR in public spaces for five years because of privacy and data concerns.

A report released in February 2020 by the Committee on Standards in Public Life, Artificial intelligence and public standards, said that, at present, the government and other public sector bodies are not sufficiently transparent about their use of artificial intelligence (AI).

“Our evidence suggests that this lack of transparency is particularly pressing in policing and criminal justice,” it said. “This is particularly concerning given that surveillance technologies like automated facial recognition have the potential to undermine human rights.”

It added that no public body should implement AI “without understanding the legal framework governing its use”.

The report was authored by Jonathan Evans, ex-director general of UK security service MI5.