China has announced comprehensive regulations aimed at safeguarding individual rights and enhancing data security to address privacy concerns associated with the widespread use of facial recognition technology.
The Cyberspace Administration of China (CAC), in collaboration with the Ministry of Public Security (MPS), released detailed measures that are set to take effect on June 1, 2025.
Key Provisions of the New Regulations
- Voluntary Participation: Individuals cannot be compelled to verify their identity using facial recognition technology. Organizations must provide alternative verification methods, ensuring that participation is entirely voluntary.
- Explicit Consent: Before collecting or processing facial data, organizations are required to obtain informed consent from individuals. This includes clearly stating the purpose, method, and retention period of the data being collected.
- Data Protection Measures: Entities handling facial recognition data must implement stringent protective measures to prevent unauthorized access or data breaches. Notably, if an organization stores facial information of more than 100,000 individuals, it must complete a filing procedure with the provincial-level or higher cyberspace administration within 30 working days.
- Restrictions in Private Spaces: The installation of facial recognition devices is prohibited in private areas such as hotel rooms, public bathrooms, fitting rooms, and toilets to prevent potential privacy infringements.
- Public Notification: In public spaces where facial recognition technology is deployed, organizations are mandated to display prominent signage, informing individuals about the use of such technology.
- Preference for Non-Biometric Solutions: The regulations encourage the use of non-biometric identification methods over facial recognition when such methods are equally effective, minimizing unnecessary collection of sensitive biometric data.
Background and Public Response
The rapid proliferation of facial recognition technology in China has led to its integration into various sectors, including public security, finance, and transportation.
While the technology offers convenience and efficiency, it has also raised significant public concerns regarding privacy violations and the potential for misuse. A survey conducted in 2021 revealed that 75% of respondents were apprehensive about facial recognition, and 87% opposed its use in public commercial spaces.
In August 2023, the CAC started a public consultation to gather opinions on new facial recognition rules. This step shows the government’s effort to balance technology with protecting individual rights.
Additionally, organizations utilizing facial recognition technology must conduct comprehensive assessments to ensure compliance with the new regulations. This includes revising data collection practices, enhancing security protocols, and establishing clear consent mechanisms.
Failure to adhere to these regulations may result in legal liabilities, including civil and criminal penalties.
China’s new regulations mark an important step toward the responsible use of facial recognition technology. The rules require clear consent, provide other ways to verify identity, and enforce strong data protection.
With these measures, the government aims to protect privacy while supporting technological progress.
