Info Gov

The Information Commissioner's Office (ICO) has this week (18 August) published a new report outlining its expectations for the responsible use of facial recognition technology (FRT) by law enforcement, including the need for “lawful, proportionate and accountable deployment” supported by effective safeguards.


The report, ‘Facial recognition in law enforcement’ outlines the ICO’s support for the “responsible use” of FRT and other biometric technologies by law enforcement to prevent and detect crime.

Audits carried out by the regulator showed a mixed picture of data protection compliance across a sample of police forces in England and Wales.

The ICO said: “Expected standards were met in some areas, but compliance remains inconsistent overall. We have worked closely with forces and policing oversight bodies to ensure steps are being taken to give the public confidence in the governance and oversight of FRT.”

The report identified the following areas where improvement is needed:

• making sure there is clear senior oversight, accountability and training for staff using facial recognition technology;
• making sure staff understand their roles and responsibilities when using facial recognition technology;
• keeping clear records of what personal information is being used, where it comes from, how it is used and who it is shared with;
• making sure images used for retrospective facial recognition (RFR) are obtained from appropriate sources and not kept for longer than necessary; and
• checking that facial recognition systems are accurate and taking steps to reduce the risk of unfairness or bias.

The report concluded that strong data protection governance is “essential to public trust”, noting that embedding clear safeguards in how FRT is used helps to reassure people and increase confidence that the technology is being used fairly and lawfully.

Across the five audited forces, the regulator made 107 recommendations covering both compliance and best practice, all of which were accepted or partially accepted.

The ICO said: “The recommendations in our audit reports are intended to guide all police forces using FRT, not just those we audited. For England and Wales, we are working with the National Police Chiefs’ Council (NPCC), and its FRT leads to drive consistent improvement across all forces, and we will also share the findings with Police Scotland and Police Service of Northern Ireland (PSNI).”

Also in this section

Sep 09, 2026

Scottish Biometrics Commissioner urges ministers to replace 2011 CCTV strategy as consultation backs wider oversight remit

Scottish Biometrics Commissioner Dr Brian Plastow has called on Scottish ministers to replace the 2011 National Strategy for Public Space CCTV in Scotland, that the framework predates the modern digital era and that the government's current review of his remit, alongside the opportunity to introduce a Scottish surveillance camera code of practice, represents a once in a generation chance to act.
Jul 23, 2026

IPT awards damages against MI5 for first time over surveillance of journalist's phone data

The Investigatory Powers Tribunal (IPT) has ordered MI5 and the Police Service of Northern Ireland to pay £10,000 each in damages to former BBC Northern Ireland home affairs correspondent Vincent Kearney, after finding that a series of communications data authorisations targeting him between 2006 and 2014 were not in accordance with the law and disproportionate, in breach of his rights under…

InfoGov Masthead Newsletter 800