In the Age of Facial Recognition, Where Do Our Rights Belong?
DOI:
https://doi.org/10.70088/74n83r31Keywords:
facial recognition, privacy, personal data protection, risk-based regulation, comparative law, algorithmic accountabilityAbstract
Facial recognition has moved from the laboratory and the checkpoint into ordinary urban life, and the question it raises is no longer technical but political: who may hold the human face, and on what terms? This paper compares how the European Union, the United States, China, India, and a range of developing economies govern facial recognition, and asks why jurisdictions that increasingly share a common regulatory vocabulary-risk-based classification, contextual differentiation, necessity and proportionality, transparency and accountability-still diverge so sharply over the rights they treat as foundational. It argues that these divergences express deeper choices about whether privacy is an inherent right or one interest among many, and about whether rules should be unified and strict or fragmented and flexible. The paper then traces the costs of that divergence: digital borders that obstruct cross-border trade, the concentration of technological power, differing rules on cross-border data flows, and contested standards of fairness. It concludes that global governance should protect a shared moral boundary, namely no large-scale and indiscriminate surveillance and no permanent digital record of ordinary life, while leaving room for institutional diversity.References
R. Jiang et al., Big Data Privacy and Security in Smart Cities. Cham, Switzerland: Springer, 2022.
European Data Protection Board, "Guidelines 3/2019 on processing of personal data through video devices," Version 2.0, EDPB, Brussels, Belgium, 2020. [Online]. Available: https://www.edpb.europa.eu/our-work-tools/our-documents/guidelines/guidelines-32019-processing-personal-data-through-video_en
Council of Europe, Consultative Committee of Convention 108, "Guidelines on facial recognition," Council of Europe, Strasbourg, France, 2021. [Online]. Available: https://edoc.coe.int/en/artificial-intelligence/9753-guidelines-on-facial-recognition.html
European Parliament and Council of the European Union, "Regulation (EU) 2024/1689 laying down harmonised rules on artificial intelligence (Artificial Intelligence Act)," Off. J. Eur. Union, 2024. [Online]. Available: https://eur-lex.europa.eu/eli/reg/2024/1689/oj
"TAKE IT DOWN Act," S. 146, 119th Cong., 2025. [Online]. Available: https://www.congress.gov/bill/119th-congress/senate-bill/146
Cyberspace Administration of China and Ministry of Public Security, "Measures for the security management of the application of facial recognition technology," Beijing, China, Mar. 2025. [Online]. Available: https://www.cac.gov.cn/2025-03/21/c_1744174262156096.htm
European Parliament and Council of the European Union, "Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation)," Off. J. Eur. Union, vol. 59, no. L 119, pp. 1–88, 2016.
Carpenter v. United States, 585 U.S. 296, 2018.
S. and Marper v. the United Kingdom, nos. 30562/04 and 30566/04, Eur. Ct. H.R. (Grand Chamber), Dec. 4, 2008.
X. Wang, "The right to data portability and distributive justice in data governance," Global Law Rev., no. 6, pp. 5–22, 2021.
X. Ding, "Institutions and scenarios: Reconstructing facial recognition and facial image information protection," Administrative Law Rev., vol. 155, no. 1, pp. 48–63, 2026.
D. Lao, "Fundamental goal and imputation mechanism of the personal information protection law system," Tribune Political Sci. Law, vol. 39, no. 6, pp. 3–17, 2021.
*Information security technology—Security requirements for facial recognition data*, GB/T 41819–2022, Standardization Administration of China, Beijing, China, 2022.
Justice K. S. Puttaswamy (Ret'd) and Anr v. Union of India and Ors., Supreme Court of India, Writ Petition (Civil) No. 494 of 2012, Aug. 24, 2017.
M. Guruswamy, "Justice K.S. Puttaswamy (Ret'd) and Anr v. Union of India and Ors.," Amer. J. Int. Law, vol. 111, no. 4, pp. 994–1000, 2017.
J. van Dijk, The Digital Divide. Cambridge, U.K.: Polity Press, 2020.
K. A. Bamberger, "Regulation as delegation: Private firms, decisionmaking, and accountability in the administrative state," Duke Law J., vol. 56, no. 2, pp. 377–468, 2006.
X. He et al., "Diff-Privacy: Diffusion-based face privacy protection," IEEE Trans. Circuits Syst. Video Technol., vol. 34, no. 12, pp. 13164–13176, 2024.
Downloads
Published
Issue
Section
License
Copyright (c) 2026 Yiqing Shi (Author)

This work is licensed under a Creative Commons Attribution 4.0 International License.









