China unveiled extensive regulation of facial recognition technology, banning its use without consent and requiring security measures be taken when it is used.
Facial recognition, alongside AI, is one of the more controversial technologies under development. While advocates point to the potential benefits in fighting crime, critics point to the potential for facial recognition to infringe people’s civil rights and lead to mass surveillance. While Western governments continue to grapple with these issues, China surprised the world with sweeping regulation on how facial recognition can, and cannot, be used.
China’s Cyberspace Administration and Ministry of Public Security unveiled the new rules late last week, outlining five principles that should guide the use of facial recognition.
The “Measures” clarify the rules for the processing of face recognition technology for the processing of face information. First, it should have a specific purpose and sufficient necessity, adopt a way that has the least impact on the rights and interests of individuals, and implement strict protection measures. The second is to fulfill the obligation of notification. Third, based on the consent of the individual to deal with face information, should obtain the individual’s voluntary and explicit consent under the premise of full knowledge. Based on the consent of the individual to deal with the face information of minors under the age of 14, the consent of the parents or other guardians of the minor shall be obtained. Fourth, in addition to the laws and administrative regulations or obtain the individual’s separate consent, face information should be stored in the face recognition device, and must not be transmitted through the Internet. Except as otherwise provided by laws and administrative regulations, the retention period of face information shall not exceed the minimum period necessary to achieve the purpose of processing. Fifth, the impact assessment of personal information protection should be carried out in advance, and the processing should be recorded.
Key Elements of China’s Rules
The actual rules governing the use of facial recognition tech includes 20 articles, covering a variety of specific requirements, including the following:
Article 6 On the basis of the consent of the individual to deal with face information, the individual shall obtain the voluntary and explicit individual consent made by the individual with full knowledge. Where laws and administrative regulations stipulate that the handling of face information shall obtain the written consent of the individual, from its provisions.
Based on the consent of the individual to process face information, the individual has the right to withdraw his consent, and the personal information processor shall provide a convenient way to withdraw the consent. The withdrawal of consent by an individual does not affect the validity of the personal information processing activities that have been carried out on the basis of the individual’s consent before the withdrawal.
Article 10 Where there are other non-face recognition technologies that achieve the same purpose or meet the same business requirements, face recognition technology shall not be used as the only verification method. If an individual does not agree to authenticate through face information, it shall provide other reasonable and convenient ways.
The application of face recognition technology to verify the identity of individuals otherwise, from its provisions.
Article 13 The installation of face recognition equipment in public places shall be necessary for the maintenance of public safety, reasonably determine the area of face information collection according to law, and set up significant reminders.
No organization or individual may install face recognition equipment inside private spaces in hotel rooms, public bathrooms, public locker rooms, public toilets and other public places.
14th face recognition technology application system should take data encryption, security audit, access control, authorization management, intrusion detection and prevention and other measures to protect face information security. Where cyber security level protection and critical information infrastructure are involved in the protection of network security levels and critical information infrastructure protection shall be fulfilled in accordance with relevant national regulations.
Conclusion
China’s new facial recognition rules make no mention of the government’s use of the technology, so there’s no way of knowing at this time if the government falls under the same rules. Critics will be quick to point out that Beijing has previously made clear its desire to have a ubiquitous surveillance system in place, so it’s probably a safe bet that the government is not subject to these rules.
Nonetheless, even if the rules only apply to the private sector, China has taken a step that many Western countries have yet to take, in terms of protecting users from invasive facial recognition.
from WebProNews https://ift.tt/y8Fb5re
No comments:
Post a Comment