I have read in the privacy community that facial recognition done in public places is considered problematic. Not knowing what is considered the crux of the matter, I have to ask about some facial and behavioral recognition use cases here, and whether they are a problem or not
- Digital signage on roads, cameras in stores, etc. read pedestrians’ faces, movements, etc. and infer attributes for marketing purposes (sometimes the inferred attributes are stored as is, sometimes they are stored as statistics and the attributes themselves are removed)
- Public transit agencies can share police databases to identify and track individuals with arrest records
- Public agencies use facial and behavioral recognition to determine and track suspicious persons. The information read is stored.
Along with what’s already been said: it’s not only what the entity collecting it is using it for, I also have issue with it being abused by others, such as hackers who obtain and sell this data, or even a lone malicious employee (‘insider threat’). Data collection is a professional industry (even the criminal side) and I have no doubt that companies or systems collecting this data are targeted for it.
Someone may want to collect it for a benevolent purpose, with consent, and do what they think is right with the information, but that information with likely get hacked and sold away for whatever someone wants it for. Like said below, then what? Get a new face?
Uno reverse, tell me a situation where facial recognition is appropriate.
I guess if you’re self hosting your own facial recognition at like your house for your fam or whatnot that’s fine
track individuals with arrest records
My dude I think/hope you mean like convicts on the run. Lots of innocent people are arrested. Iirc a trial is needed to determine who’s a convict. Assuming prisons are ethical, which is another issue.
Even tracking convicts is unethical imo, they paid their debt to society and now they’re out ffs, if they shouldn’t be out then leave them in but to track everyone because “convicts” steps all over their rights and ours.
My dude I think/hope you mean like convicts on the run.
They may arbitrarily track persons with arrest records for the purpose of preventing crimes before they happen. And persons with inexplicable behavior can be tracked as well. Furthermore, since some facial recognition systems have been introduced clandestinely, it is a realistic scenario that such systems are being used more extensively in a clandestine manner.
FIDO, IMF, UN, and other large orgs are talking about making biometrics normal to use many times a day to login to your phone, PC (via “service provider”), board a bus or plane or taxi…soon, we won’t be able to get away from it.
Remember how much has socially changed in the last 40 years and what was acceptable then is frowned upon now - or vice versa? In another 40 years, your inability to keep up with the times could land you on the bad-boy list - being cut off from internet/phone access, travel, the ability to pay for things, etc.
Humans (all life forms really) were made to be free and not digitally enslaved or bound.
When the government becomes oppressive, changes laws to draconian ones, can find you ANYWHERE through a digital wallet that uses a digital ID, FIDO, and CBDCs, so can shut off your access to ANYTHING and EVERYTHING if you donate money to the ‘wrong’ cause or say the ‘wrong’ thing or fail to comply with some new law/rule/mandate that you find unethical and over the line.
With behavioral identifiers, it is possible to change the type, quality, quantity, or values of data collected about you going forward (and thus your ability to be tracked) without too much of a problem. You can buy different devices or trade your existing ones, avoid specific websites/apps, use privacy friendly services, use services that protect you, change/delete your information, provide false information, etc. Granted, there may be limitations and certaintly many inconveniences in doing so but it is possible.
When it comes to biometric identifiers (eg - retina, fingerprint, face, dental, DNA, etc.) or even pseudo-biometric identifiers (eg - gait/stride, handwriting, typing cadence, etc.), it is much more difficult, if not impossible, to change the type, quality, quantity, or values of data collected about you. You may be able to change all or some of these identifiers, but at a much larger financial cost, inconvenience, physical pain, etc. and you may only be able to change some of those identifiers a finite number of times. How do you change your DNA (or prevent companies from obtaining it with certainty) once insurance companies have it and start denying you policies due to certain genetic dispositions? How do you change your fingerprints once a company who requires that information to prevent abuse of their service is hacked? How do you change your facial construct after a company like ClearviewAI has it from your presence on social media?
You may be OK with a certain company having your data right now for a particular purpose (eg - biometric lab for medical blood tests), but you may not be comfortable with that same company having that data years from now (eg - same biometric lab keeping your data to help identify medical trends for you, but you no longer want them to have it because you switched labs), using it for purposes unbeknownst to you (eg - same biometric lab uses your data for medical research), or any of the entities that have received that data via sharing, selling, hacking, negligence, etc. Once your data is made available or placed in the wrong hands, you have no idea how your data will be handled, used, or abused nor for how long your data will be stored. That’s especially true for data that cannot easily be changed, like biometric data.
Also, there are several examples of exploitation, misidentification, and other poorly implemented versions of facial recognition. People have been misidentified as someone committing a crime and incorrectly arrested or even placed in jail. People have been incorrectly targeted by stores as a person likely to shoplift due to their skin tone. It’s also possible for fraud or identity theft to occur when this technology is handled poorly.
Despite all this, many retail companies are including this type of technology and it will likely continue to be adopted unless there is some legal or regulatory rrestriction Additionally, it’s never been easier for people to feed the facial recognition databases (eg - doorbell cameras, home security cameras, cellphones, drones, etc.). The dystopian scenario behind this is that you won’t be able to leave your home without being tracked between consumer devices in residential areaa, government devices in public places, and corporate devices in retail/office spaces without being tracked. The scary thought is that we may be closer to that scenario than many people realize.
I was pissed when TX fingerprinted me just for getting a driver’s license.
Thank god for hoodies and mirrored sun-glasses. men should all start wearing their hair a bit longer to hide the side views of their face.
Thank you for your detailed response.
In my country, biometric and pseudo-biometric data acquisition is widely used by companies and even the government for crime prevention (and of course for marketing purposes). Where do you think there should be a trade-off in privacy vs. crime prevention (benefit to society as a whole)?
deleted by creator
Should we have cameras? Absolutely! They’re great at providing evidence of a crime and catching the perpetrator. They can be used in ways that doesn’t egregiously invade everyone’s privacy that happens to walk by a camera. Should there be automated human/object detection? Sure! It could help reduce storage costs of video and maybe even enable more cameras to be used as a result. Should the videos have automated individual identification/facial recognition? I’m torn here. Having it could enable certain features. For example, a bank could be setup to only allow the vault to be opened for certain individuals or a person could setup an automation to automatically unlock their front door when they walk up. However, I do not think that massive databases of people/faces should be built, collected, shared, etc. There are several other ways to prevent and deter crime that do not require the invasion of everyone’s privacy. If the concern is theft, you could place the items in a cage, behind a counter, in anti-theft boxes, hire additional staff, etc.
Out of all the other reasons listed, I don’t see how most of them benefit society. What good does facial recognition provide on tracking pedestrians? Why is it needed? Couldn’t whatever benefit you think is occurring happen with cameras that only detect that a person is on screen? Why would you want facial recognition for marketing purposes? What benefit does it provide you or society that the dozens of other ways marketing companies track their target audience isn’t already doing? Also, why do people who aren’t part of a target audience need to be included in a company’s mass collection of faces? Why does a beard care company need to gather women’s faces? Why does a tampon company need to gather men’s faces? Why do we need another way to track people taking public transit that couldn’t already be done with existing methods?
The only reason that I believe you’ve listed that is potentially valid is public agencies tracking fugitives. If you’re wrongly committed of something though, what do you do? You can’t go in public, you can’t take public transit, you can’t go to the store. Do you just turn yourself in and hope the agencies find the true perpetrator or hope you can afford a good enough lawyer to get your case dismissed? Also, what percentage of the population requires this? I assume its likely less than 10% and that may be generous. So that means that the vast majority of the population do not deserve to have their privacy protected and must have their faces collected, sold, shared, etc. because a small percentage of the population may be fugitives.
Crime has occurred before this privacy invasive technology existed and it will continue to occur with it. It’s unreasonable that everyone’s privacy must be abused in the name if safety when it will likely not even make a major change to crime prevention.
I agree with your statement. Then, if I dare to respond with my country and citizen stance…
What good does facial recognition provide on tracking pedestrians? Why would you want facial recognition for marketing purposes?
In fact, besides facial recognition, a complex set of technologies is used. This allows us to infer information such as where, who, and what they did. Such systems are often implemented from a crime prevention perspective, but they are also useful for large scale collection of statistical data. The results of the analysis are fed back to us, and many people are happy with the increased convenience.
Also, why do people who aren’t part of a target audience need to be included in a company’s mass collection of faces?
It may be a hidden target, or it may be useful in another business of that company or government. In fact, some services have been launched as a result of such data analysis, with some success.
If you’re wrongly committed of something though, what do you do?
The behavior of fleeing because of a false accusation is likely to result in another charge or more accusations than being arrested. You should either turn yourself in or be arrested and fight it out in court. Others argue that these systems are also useful in reducing false convictions.
Also, what percentage of the population requires this? I assume its likely less than 10% and that may be generous.
Also, many citizens support such a system, saying that it is “for the safety of society” and “for the arrest of criminals.”
Because of the laws governing the handling of personal data, many citizens trust that the information obtained by companies and governments is properly managed and used for the right things, and the prevailing view is that sacrificing some privacy for security and convenience is unavoidable.
My privacy is more valuable than your safety.
Those same people wanting safety are often the ones wanting criminals to have lighter sentences.Those same people wanting safety are often the ones wanting criminals to have lighter sentences.
It was introduced not to lighten the sentence, but to minimize the harm suffered by the victim. Support is strong, considering what would happen if I were to be victimized tomorrow and what would happen to the victim.
Such systems are often implemented from a crime prevention perspective, but they are also useful for large scale collection of statistical data. The results of the analysis are fed back to us, and many people are happy with the increased convenience.
Why do you need to know who is doing what? Wouldn’t it be nearly or just as beneficial knowing someone is doing something? You could use person detection (but not identification) for this. If you were trying to see how many people used a park, person recognition could help solve that.
It may be a hidden target, or it may be useful in another business of that company or government. In fact, some services have been launched as a result of such data analysis, with some success.
Abusing people’s privacy is a large price to pay for new business. Once a population’s privacy is lost in certain areas, it can be really hard to get it back. Typically we outlaw businesses where people are abused, whether its their rights/freedoms, health/wellbeing, safety, etc. I’m not sure why privacy should be any different (I know privacy isn’t a right in all countries though).
Also, many citizens support such a system, saying that it is “for the safety of society” and “for the arrest of criminals.”
Because of the laws governing the handling of personal data, many citizens trust that the information obtained by companies and governments is properly managed and used for the right things, and the prevailing view is that sacrificing some privacy for security and convenience is unavoidable.
I agree. However, I don’t think it’s clear or obvious what they are fully agreeing to. I imagine if all information you have on someone, the insights drawn from that information, and possibly even how they information is/could be abused, I think their stance on the topic may change. To many people, their privacy is something that they don’t realize they want and need until its clear to them that it’s been invaded. Since this these facial recognition programs are done in ways that don’t prevent people from doing what they want to do (eg - go to the store, go to the park, etc.), are unobtrusive (eg - the cameras are silent, placed in corners, relatively small, etc.), and the processing is done behind closed doors, people don’t really care or understand what is happening. They may not know how many cameras have captured their activity or even where the cameras are that may capture their activity.
If we replaced wall mounted cameras with people operating a camera and an individual camera operator follow each person around in areas that are using facial recognition, do you think people would be as supportive of such programs? I don’t think that the additional cost of cameras/operstors or crowd due to camera operators will be people’s main complaint.
Even if we just sent a letter to each person identified by facial recognition cameras with the information that was gathered (eg - where they were seen, how long they were seen at each spot, who they were seen with, what they may have been doing, etc.) plus any additional information that is tracked (rg - you were seen at this location XX times in the past YY days/weeks/months, you are typically at this place with ZZ person(s), you typically spend XX time there, etc.), then I doubt people would be so apathetic to their privacy being invaded.
Why do you need to know who is doing what? Wouldn’t it be nearly or just as beneficial knowing someone is doing something?
For example, by estimating who visited the location, to do what, and how many times, they are able to determine if there is any suspicious behavior (although the criteria are unknown). This is, of course, also used for marketing purposes, as in how many times a customer with what attributes has used the service.
If there is an alert that there is suspicious activity, the police or employees will monitor, track or question the person in question, and the system will mark that suspicious person as one of the people on the suspicious person list in the future.
You could use person detection (but not identification) for this. If you were trying to see how many people used a park, person recognition could help solve that.
Also, there are many instances where companies and governments have built facial recognition systems, saying that they are doing person detection. It is difficult for the public to be sure that companies and governments have not built and abused such systems.
I’m not sure why privacy should be any different (I know privacy isn’t a right in all countries though).
Yes, privacy is a very low priority right in my country. For this reason, people often adopt the idea of sacrificing privacy to protect the rights of citizens or to make them healthier and happier.
Your response raises a lot of questions and potential red flags.
Who is developing the algorithms that determines suspicious behavior? Who is reviewing those algorithms to determine if any bias is in the algorithms, regardless of whether the bias is intentional or not? Are changes to the algorithms retroactive (eg - does a person who stood in a place for 11 mins last month get an infraction when the algorithm is updated from <=15 mins in that location is OK to >=10 mins is not OK)? How long are the infractions held for? Are immediate actions taken when an infraction occurs (eg - guard dogs are released when a criminal gets too close to an expensive item)? Are people made aware of any infractions they may have or receive? Are people made aware of what causes any/all infractions? Are people made aware that they’re being recorded or the level of recording (eg - facial recognition vs person detection)?
The point I’m trying to make here is that there are so many things to consider to make sure this is done correctly. I don’t think we even understand all of the scenarios to think through. Its one thing to do things wrong on a small scale, but when you’re talking about surveiling an entire city or country, then this needs to be done extremely thoughtfully and cautiously.
Also, there are many instances where companies and governments have built facial recognition systems, saying that they are doing person detection. It is difficult for the public to be sure that companies and governments have not built and abused such systems.
This goes back to the point I was making previously - it’s really hard to leave gihr home and not be recorded already. You’ll likely never know where you’re being recorded, who is recording you, or what will be done with your recordings. We’re losing the little privacy we do have left outside our homes and there’s not much we can do about it.
Yes, privacy is a very low priority right in my country. For this reason, people often adopt the idea of sacrificing privacy to protect the rights of citizens or to make them healthier and happier.
Since most of these digital privacy invasive technologies are innocuous and people are told of the benefits without understanding the drawbacks, its easy to think this technology is good. However, as people start to understand the scale and capability of these technologies, they will likely become less happy about them. They may get frustrated at not only themselves for not opposing the technologies originally, but at the government, retail store, tech companies, etc. for promoting the technologies and exploiting them.
Also, being monitored and tracked all the time is not a healthy thing. People behave and think differently when they’re watched. People need alone time. People need privacy. Having it allows people to explore, be curious, experiment, learn, and so much more. Having facial recognition cameras may not seem too repressive, but when it starts to change their behavior because they don’t want to be identified at a certain park/store/corner/etc., then that mental/emotional barrier to entry is just as hard to overcome as a physical wall/gate.
Who is developing the algorithms that determines suspicious behavior? Who is reviewing those algorithms to determine if any bias is in the algorithms, Who is reviewing those algorithms to determine if any bias is in the algorithms, regardless of whether the bias is intentional or not? …
Only companies and developers would know the details. Of course they are auditing, and if you ask, you will probably get some kind of response. On the other hand, they may not tell you for security reasons.
Are people made aware that they’re being recorded or the level of recording (eg - facial recognition vs person detection)?
That is put up as a poster, but some people may not know. If you want to use that service, you have no choice but to accept it.
This goes back to the point I was making previously - it’s really hard to leave gihr home and not be recorded already. You’ll likely never know where you’re being recorded, who is recording you, or what will be done with your recordings. We’re losing the little privacy we do have left outside our homes and there’s not much we can do about it.
If we’re going to lose them sooner or later, wouldn’t it be better to make use of them in order to achieve a more prosperous society?
The state also justifies the arbitrary harvesting and storage of biometric information by claiming in court that "it is the natural authority of the state to store information about its citizens. If this is followed, there is already no privacy at all in the public sphere. And large corporations will follow the state’s argument and say that it is their natural right to supplement their customers’ information.
I guess my country is trying to figure out how to enrich our society in the future by acknowledging that privacy does not exist. And shouldn’t we?
Having facial recognition cameras may not seem too repressive, but when it starts to change their behavior because they don’t want to be identified at a certain park/store/corner/etc., then that mental/emotional barrier to entry is just as hard to overcome as a physical wall/gate.
This is a statement I heard from an acquaintance of mine, but I’d like to ask it here as well:
Disney uses three-point fingerprint information, wristband, and facial recognition technology to identify individuals in its facilities with sufficient probability. In other words, these personal identification technologies are legal and accepted in the world-famous land of dreams. Furthermore, the technologies used by companies and governments are similar. So why prohibit companies, stores, or countries from using those technologies? What makes them different from Disney?
We enjoy living in this country as much as we enjoy the attractions at Disney, don’t we? There is absolutely nothing wrong with those technologies. It provides convenience, efficiency, security, and makes people and businesses happy.
deleted by creator
The use cases mentioned in the above text are common in my country. So I would like to understand if these use cases are a problem and why.
i would hate to live in your country. either there are mnay criminals needing to be watched, or your government has made so many oppressive laws that many people are made into criminals based on the laws only. ChaungTzu talks a bit about how a bird would rather live freely in a dangerous convenient world than be well-fed and taken care of in a cage.
deleted by creator
Did you as an innocent person explicitly agree to be tracked this way and your sensitive biometric data being stored?
Generally, clear consent for all users is not possible, so a sign is posted there. And if you do not agree, you can choose not to use those services (although that is virtually impossible).
Also, in my country, anything other than biometric data obtained by special equipment is not considered sufficient biometric data and is on the border between illegal and legal.
deleted by creator
I think there is a legal grey area there right now as the technological development moved much faster than the corresponding legal situation.
I agree. And unfortunately even if laws are enacted, governments and companies will secretly operate those systems (as they have done and will do in my country).
