Rights vs security & privacy
Should Police Use Facial Recognition Technology?
LNAT Section B · Model essay
The essay prompt
Should the police be allowed to use facial recognition technology to identify people in public? Set out the arguments on each side and reach a reasoned conclusion.
The stance
The police should be permitted to use facial recognition, but only inside a binding statutory framework: live identification of crowds in public spaces should be barred save for narrow, court-authorised exceptions, while tightly governed retrospective searches remain available. The real question is not whether police may use it, but on what terms; unregulated deployment is indefensible.
Defining the terms
- Facial recognition technology (FRT): automated biometric matching of a face captured on camera against a database, either one-to-one verification or one-to-many identification, generating a probability score against a threshold.
- Live (real-time) FRT: scanning every passing face in a public space against a watchlist as people move, in effect a continuous biometric identity check on the whole crowd.
- Retrospective FRT: searching a still image of a known suspect against records after the event, closer in kind to an ordinary fingerprint search.
- Watchlist: the set of faces the system is told to look for, the criteria for which determine whose biometrics are checked and why.
- Regulated use (versus a ban): a binding legal framework setting lawful bases, prior authorisation, accuracy and bias standards, retention limits and independent oversight, rather than either prohibition or unconstrained discretion.
Assumptions to interrogate
- That FRT is simply a faster CCTV camera, so the existing law on surveillance already covers it.
- That the technology matches all faces equally well, so wrongful identifications are too rare to worry about.
- That internal police policy and supplier assurances are an adequate substitute for binding law.
- That scanning faces in public does not seriously engage privacy or deter people from protest and worship.
- That convenience for the police is the same thing as a net gain for public safety.
The case for
It is a powerful tool against serious crime when targeted.
Used retrospectively against a known image, FRT can identify suspects in terrorism, trafficking and serious violence far faster than manual review of footage. The EU's own AI Act, which bans most live use, still preserves exceptions precisely for finding trafficking victims, missing people and terror suspects, conceding that there are cases where the public-safety value is real and worth keeping.
Blanket prohibition would throw away a legitimate investigative capability.
The honest case against police FRT is usually a case against one form of it, live mass scanning. A complete ban would also forbid the narrow, warrant-based searches that even privacy-focused regimes allow, depriving investigators of a tool no more intrusive in principle than a fingerprint or DNA database, both of which the law already permits under controls.
Regulation, not abolition, is what makes the technology usable.
Without common standards, each force picks its own thresholds and watchlist rules, so a match treated as actionable in Cardiff is ignored in London and evidence becomes hard to share or admit. A statutory baseline on accuracy, retention and human review is what turns scattered pilots into a coherent, trustable system, which is why the House of Lords committee called for exactly that.
Clear rules protect officers and the public alike.
A framework that fixes when, where and against whom FRT may be deployed gives officers legal certainty and gives citizens a basis to challenge misuse. The choice is not between policing and rights; well-drawn law serves both by making lawful use predictable and unlawful use contestable.
The case against
Live FRT in public engages privacy in a way CCTV does not.
An ordinary camera records; FRT identifies. It converts a crowd into a set of database queries, scalable, searchable and persistent. In R (Bridges) the Court of Appeal held that South Wales Police's live deployment engaged Article 8 of the Convention and was unlawful because the rules left too much to officers' discretion. The qualitative leap, not the camera, is the problem.
The technology misidentifies, and not evenly.
NIST's large study found false-positive rates for Asian and African American faces in one-to-one matching ranging from ten to a hundred times higher than for white faces, with the worst one-to-many error rates falling on Black women. Because officers tend to trust a computer 'match', a probabilistic hint hardens into an arrest, as Robert Williams found in Detroit when a wrong match cost him thirty hours in custody.
Constant identification chills protest, worship and dissent.
People behave differently when they know every face is logged. Live FRT at a demonstration or outside a place of worship deters lawful assembly and expression, freedoms protected by Articles 10 and 11. Function creep then drags the tool from serious crime toward routine monitoring. A democracy that cannot tolerate anonymity in a crowd has already lost something it needs.
Black-box deployment is unaccountable.
Decisions ride on proprietary algorithms and confidence scores shielded as trade secrets. Without mandatory impact assessments, logging and independent audit, courts and defendants cannot test reliability or exclude tainted evidence. Self-regulation by the forces that benefit from the tool is not oversight; it is a press release.
The argument, step by step
- Reframe the question: the serious issue is not whether police may ever use FRT, but whether they may deploy live, indiscriminate identification of the public without binding rules.
- Concede the genuine value: retrospective, targeted use against serious crime is a real capability that a blanket ban would wrongly destroy.
- Draw the central distinction: live one-to-many scanning of crowds is qualitatively different from a fingerprint-style search and engages privacy, expression and assembly at scale.
- Deploy the strongest authority: Bridges shows that even existing deployments were unlawful for want of a clear framework, not because the aim was illegitimate.
- Add the empirical problem: documented demographic error rates and automation bias turn the technology's flaws into wrongful arrests, as Williams illustrates.
- Resolve toward tiered regulation: bar live public identification save for narrow court-authorised exceptions, permit governed retrospective searches, and require accuracy standards, audit and redress. The answer is yes, but only under law.
The model plan
Stance: police may use FRT, but only under a binding statutory regime; live public scanning barred except for narrow court-authorised exceptions, retrospective use tightly governed; unregulated deployment indefensible. Intro (approx 90 words): reframe from 'may they use it' to 'on what terms'; flag the live-versus-retrospective distinction and the Article 8 hook. P1 (the genuine case for use): retrospective targeting of serious crime is valuable; even the EU AI Act keeps exceptions for trafficking, missing persons, terror; a blanket ban overreaches. P2 (why live use is different): FRT identifies, not merely records; Bridges [2020] EWCA Civ 1058 held live AFR engaged Article 8 and was unlawful for excess discretion over watchlists and locations; breaches of DPA 2018 and Equality Act 2010 too. P3 (accuracy and bias): NIST FRVT Part 3 (NISTIR 8280) found 1:1 false positives 10 to 100 times higher for Asian and Black faces, worst 1:N for Black women; automation bias; Robert Williams wrongful arrest, 30 hours. P4 (chilling effects and accountability): live FRT at protests and worship chills Articles 10 and 11; function creep; black-box vendor opacity needs mandatory DPIAs, logging, audit. P5 (the regime): tiered rules, House of Lords 'Technology rules?' (2022) and EU AI Act structure as models; bar live ID, permit warrant-based retrospective. Conclusion (approx 70 words): stack the rationales; yes to use, but only under binding, tiered regulation. Each point links back to the terms-of-use framing.
The model essay
Posed as a flat yes-or-no, the question almost answers itself, but the serious version is sharper. The police already use facial recognition; the real issue is on what terms. I will argue that they should be permitted to use it, but only inside a binding legal framework that bars live, indiscriminate scanning of the public save for narrow, court-authorised exceptions, while allowing tightly governed retrospective searches. Unregulated deployment, of the kind British courts have already condemned, is indefensible.
The case for permitting the technology at all is genuine and should not be caricatured. Used after the event against a known image, facial recognition can identify suspects in terrorism, trafficking and serious violence far faster than officers combing footage by hand. Even the European Union's AI Act, which prohibits most live public use, deliberately preserves exceptions for finding trafficking victims, locating missing people and stopping imminent terror attacks. A blanket ban would also forbid these narrow, warranted searches, depriving investigators of a tool no more intrusive in principle than the fingerprint and DNA databases the law already sanctions under controls. To abolish the capability outright is to overcorrect.
Live scanning of crowds, however, is a different animal. An ordinary camera records; facial recognition identifies. It converts every passing face into a database query, scalable, searchable and persistent, and so amplifies state power rather than merely extending an existing one. This is why, in R (Bridges) v Chief Constable of South Wales Police, the Court of Appeal held that the force's live deployment engaged Article 8 of the Convention and was unlawful, not because the aim was illegitimate but because the rules left too much to officers' discretion over who went on a watchlist and where the cameras were pointed. The court also found breaches of the Data Protection Act 2018 and the public sector equality duty. The lesson is precise: the problem was the absence of a clear, specific framework, exactly what regulation would supply.
The technology's flaws sharpen the point. The United States' National Institute of Standards and Technology, testing nearly two hundred algorithms, found false-positive rates for Asian and African American faces in one-to-one matching ten to a hundred times higher than for white faces, with the worst one-to-many error rates falling on Black women. These are not abstract differentials. Because officers tend to trust a computer 'match', a probabilistic hint hardens into a custodial fact, as Robert Williams discovered in Detroit, wrongly arrested on a false match and held for thirty hours in front of his family. Equality before the algorithm is part of equality before the law, and only mandated accuracy thresholds, bias audits and human-in-the-loop rules can deliver it.
There is a further, democratic cost. People behave differently when they know every face is logged; live recognition outside a protest or a place of worship deters the lawful assembly and expression protected by Articles 10 and 11, and function creep tends to drag such tools from serious crime toward routine monitoring. A democracy that cannot tolerate anonymity in a crowd has surrendered something essential. Nor can deployment be left to internal policy, since the decisive judgments ride on proprietary algorithms shielded as trade secrets; without compulsory impact assessments, logging and independent audit, neither courts nor defendants can test reliability or exclude tainted evidence. Self-policing by the forces that benefit is not oversight.
The answer, then, is a regulated yes. A tiered statutory regime, of the sort the House of Lords Justice and Home Affairs Committee urged and the EU AI Act roughly models, should prohibit live mass identification except under prior judicial authorisation for imminent serious offences, permit retrospective searches only on high thresholds with a documented impact assessment, and require independent accuracy certification, retention limits, notice and redress. Far from hamstringing the police, clear rules make lawful use predictable and unlawful use contestable, and turn scattered pilots into a system that evidence can rest on.
So the police should use facial recognition, but only on terms set by binding law. Without that framework we invite illegality, wrongful arrest and democratic chill; with it, we keep a targeted tool while protecting the rights it threatens. The question is not whether, but how, and the honest how is regulation.
Authorities worth knowing
R (Bridges) v Chief Constable of South Wales Police
[2020] EWCA Civ 1058 (Court of Appeal, 11 August 2020)
Live automated facial recognition engaged Article 8 of the ECHR and was unlawful because the legal framework left too much discretion to officers over who could be placed on a watchlist and where the technology was deployed; the deployment also breached the Data Protection Act 2018 and the public sector equality duty under the Equality Act 2010.
NIST Face Recognition Vendor Test (FRVT) Part 3: Demographic Effects
P Grother, M Ngan and K Hanaoka, NISTIR 8280, US National Institute of Standards and Technology, December 2019
Testing nearly 200 algorithms, NIST found one-to-one false-positive rates for Asian and African American faces ranging from 10 to 100 times higher than for white faces, with the highest one-to-many false positives for African American women; such errors in identification can lead to false accusations.
Williams v City of Detroit (Robert Williams wrongful arrest)
ACLU of Michigan / federal civil-rights suit, 2021; arrest January 2020 (first publicly known US wrongful arrest from facial recognition)
An incorrect facial-recognition 'match' led Detroit police to arrest Robert Williams, an innocent man, who was held for around 30 hours; the case illustrates how automation bias converts a probabilistic algorithmic hit into a wrongful custodial outcome.
Regulation (EU) 2024/1689 (the EU Artificial Intelligence Act)
Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024, Article 5; prohibitions applicable from 2 February 2025
Real-time remote biometric identification in publicly accessible spaces for law enforcement is in principle prohibited, subject to three narrow exceptions (targeted search for trafficking and abduction victims and missing persons; prevention of a substantial and imminent threat or terror attack; identification of suspects of serious offences), each requiring safeguards, a fundamental-rights impact assessment and authorisation.
House of Lords Justice and Home Affairs Committee, 'Technology rules? The advent of new technologies in the justice system'
1st Report of Session 2021-22, HL Paper 180, published 30 March 2022
Found that the use of advanced technologies such as live facial recognition by law enforcement was inadequately governed and inconsistently applied across forces, and called for a clear legislative framework, mandatory standards and training to ensure use is necessary, proportionate and effective.
How the law frames it
United Kingdom
There is no bespoke statute governing police facial recognition; deployment runs on a patchwork of the Data Protection Act 2018 (Part 3, law enforcement processing), the Equality Act 2010, the now-superseded surveillance camera codes and force-level policy. In R (Bridges) v Chief Constable of South Wales Police [2020] EWCA Civ 1058 the Court of Appeal held live deployment unlawful for want of a clear framework limiting watchlists and locations. The House of Lords Justice and Home Affairs Committee's 2022 report 'Technology rules?' called for proper legislation, which has yet to arrive.
Canada
Canada has no dedicated facial-recognition statute either. The federal Privacy Commissioner, with provincial counterparts, found in 2021 that the RCMP's use of Clearview AI, which scraped billions of images from the internet, breached the Privacy Act, and Clearview was found to have violated Canada's private-sector privacy law (PIPEDA). Parliamentary committees have since urged a moratorium on police use pending a clear legal framework, mirroring the UK regulatory gap.
ECHR
Facial recognition engages Article 8 (private life), and live use at protests or places of worship can engage Articles 10 (expression) and 11 (assembly). Strasbourg case law on covert surveillance (for example S and Marper v UK on indefinite retention of biometric data) requires interferences to be in accordance with a foreseeable law and proportionate. Bridges applied that logic domestically. The EU AI Act, while not ECHR law, builds on the same rights framework by presumptively prohibiting live public biometric identification.
Counter-arguments and how to defeat them
Counter. facial recognition is just a faster CCTV camera, already covered by existing surveillance law.
Rebuttal. a camera records, but recognition identifies, turning a crowd into searchable, persistent database queries; that qualitative leap is precisely why Bridges found the existing framework inadequate.
Counter. algorithms are improving fast, so internal quality assurance and supplier contracts are enough.
Rebuttal. 'trust us' is not governance; only independent benchmarks, published error rates and audit can verify accuracy, and rights-compatible standards drive better systems rather than freezing them.
Counter. barring live use at protests lets violent offenders escape.
Rebuttal. targeted policing can rely on warrant-based retrospective searches and conventional tactics; the systemic chilling of lawful assembly is too high a price for a marginal real-time gain, so any exception must be judicially authorised for imminent serious offences only.
Counter. full transparency would let criminals reverse-engineer and evade the system.
Rebuttal. layered transparency solves this, with regulators and courts granted full access while the public receives aggregate metrics and principled rules, as is standard in other safety-critical fields.
Counter. bespoke regulation is slow and bureaucratic and will paralyse policing.
Rebuttal. clear tiered rules actually accelerate lawful use by settling in advance when FRT is permitted; ambiguity is what breeds litigation, excluded evidence and inconsistent practice between forces.
Conclusion
The honest answer is a regulated yes. The police should be allowed to use facial recognition, because a targeted, retrospective capability against serious crime is genuinely valuable and a blanket ban would overreach. But live, indiscriminate scanning of the public is qualitatively different, and the British courts have already shown that deploying it without a clear framework is unlawful, while NIST's data and the Williams case show how its uneven errors become wrongful arrests. The defensible position is a binding, tiered regime: live mass identification barred save for narrow court-authorised exceptions, retrospective use tightly governed, with accuracy standards, audit and redress. The question is not whether the police may use it, but on what terms, and the only sustainable terms are set by law.
Evidence you can cite
- In NIST's evaluation of nearly 200 algorithms, false-positive rates in one-to-one matching for Asian and African American faces were typically 10 to 100 times higher than for white faces, and the highest one-to-many false-positive rates fell on African American women.NIST, Face Recognition Vendor Test (FRVT) Part 3: Demographic Effects, NISTIR 8280 (December 2019) — source
- Robert Williams was held in police custody for roughly 30 hours after a facial-recognition system wrongly flagged him as a robbery suspect, in what is reported as the first known wrongful arrest in the United States caused by the technology.ACLU, 'Williams v. City of Detroit' case page — source
- The EU AI Act bans real-time remote biometric identification in public spaces for law enforcement subject to only three narrow exceptions, and the relevant prohibitions have applied since 2 February 2025.Regulation (EU) 2024/1689, Article 5 (EUR-Lex) — source
Further reading
- R (Bridges) v Chief Constable of South Wales Police [2020] EWCA Civ 1058 (full judgment, BAILII)
- NIST, Face Recognition Vendor Test (FRVT) Part 3: Demographic Effects, NISTIR 8280 (2019)
- Regulation (EU) 2024/1689 (the EU AI Act), Article 5 (EUR-Lex)
- House of Lords Justice and Home Affairs Committee, 'Technology rules?' HL Paper 180 (2022)
- ACLU, 'Williams v. City of Detroit' (facial recognition false arrest)
- Office of the Privacy Commissioner of Canada, joint investigation into the RCMP's use of Clearview AI (2021)