Evidence
England scaled police face recognition while US cities pulled out of plate-reader networks
| Date | Case | Country | What happened | Source |
|---|---|---|---|---|
| Aug 13, 2025 | Home Office facial recognition vans | United Kingdom | 10 vans to seven forces, with 40 more announced in January 2026 | Source |
| 2025 to 2026 | Flock contract cancellations | United States | At least 30 jurisdictions including Cambridge, Eugene and Santa Cruz | Source |
| May 2026 | First live facial recognition at a protest | United Kingdom | Met used it at a Camden operation | Source |
| Jun 1, 2025 | China facial recognition measures | China | On-device storage, impact assessments and non-face alternatives required | Source |
Registry
Two registry incidents involve surveillance
Registry incidents meet a stricter bar than the cases above: public sources name the developer, the failed control and who found it.
| Incident | Date | Agent | Control that failed |
|---|---|---|---|
| Amazon Echo Sends a Private Conversation to a Contact | May 2018 | Voice assistant | Spoken confirmation satisfied by background speech |
| Tesla Staff Share Customer Car Camera Footage | 2019 to 2022 | Vehicle camera data pipeline | Employee access to customer recordings |
Exposure
15 of 17 agent types rate very significant or critical on data capture and retention or perception and sensors
From the attack surface ratings, the agent types where this risk has the widest path in.
| Agent type | Dimension | Rating |
|---|---|---|
| Ambient sensors | Data capture and retention | Critical |
| Robotaxis and autonomous vehicles | Perception and sensors | Very significant |
| Humanoid robots | Perception and sensors | Very significant |
| Industrial robots and cobots | Perception and sensors | Very significant |
| Autonomous trucks | Perception and sensors | Very significant |
| Drones | Perception and sensors | Very significant |
| Fleets and swarms | Data capture and retention | Very significant |
| Phones and tablets | Perception and sensors | Very significant |
| Wearables | Perception and sensors | Very significant |
| Vehicle cabin AI | Perception and sensors | Very significant |
| Smart home assistants | Perception and sensors | Very significant |
| Medical devices | Perception and sensors | Very significant |
| Public infrastructure | Perception and sensors | Very significant |
| Workflow agents | Data capture and retention | Very significant |
| Enterprise agents | Data capture and retention | Very significant |
Controls that bound it
- Consent and Capture: what always-on devices record, signal and keep
- Access Control and Permissions: what an agent can reach and on whose authority
Rules
The EU bans most police real-time face ID; China requires filing; the UK has no statute
| Rule | Jurisdiction | What it requires | Status |
|---|---|---|---|
| EU AI Act Article 5 | EU | Bans untargeted face scraping and most police real-time biometric ID | Feb 2, 2025 |
| Facial recognition security management measures | China | Consent, impact assessment, filing above 100,000 people | Effective Jun 1, 2025 |
| Illinois BIPA | Illinois | Written consent for biometrics; private right of action | In force since 2008 |
| Home Office legal framework consultation | UK | Proposed regulator for police biometrics | Closed Feb 2026 |
Status colors: green in force, blue voluntary standard or framework, amber adopted and phasing in, gray draft or pending, red withdrawn.
Record
Page Record
- Risk group
- Human Risks
- Datasets
- ai_risk_evidence.csv (4 rows); registry incidents (2 linked); ai_attack_surface.csv
- Key sources
- Home Office facial recognition vans
Flock contract cancellations
First live facial recognition at a protest
China facial recognition measures - Last verified
- October 2026