You have a choice: China’s top court empowers people to say ‘no’ to facial recognition use by private businesses
- China’s top court pushes back against arbitrary use of facial recognition data and clarifies rules amid widespread technology adoption
- The directive can empower Chinese individuals to resist abuse of facial recognition technology by private businesses
China’s top court has made a key judgment related to facial recognition technology, empowering individuals to reject unauthorised facial recognition data collection by commercial entities such as hotels, banks and nightclubs.
The decision, which is included in a directive issued to local courts this week by the People’s Supreme Court, makes it clear that any collection and analysis of facial data by commercial operations must receive the “independent” consent of the individual concerned. If not, the act of using facial recognition technology can be defined as an infringement of personal rights and interests, a civil offence that allows the victim to file a lawsuit and claim compensation.
The directive will likely have far-reaching consequences for China’s booming surveillance camera and related data systems industry, increasing legal and operating costs.
It also redefines the legal boundary between privacy and surveillance at a time when hotels, shopping malls, bank branches, train stations, airports, stadiums and entertainment venues across China are rushing to install facial recognition systems to digitalise their operations, often without individual consumer consent.
China’s facial recognition technology identifies people wearing masks amid the Covid-19 epidemic
“The Supreme Court was in a hurry. It didn’t even wait for the Personal Information Protection Law to be rolled out,” said He Yuan, executive director of Shanghai Jiao Tong University’s Data Law Research Centre. “Because it cannot wait anymore.”
Although facial recognition technology has been widely-adopted in China, laws pertaining to invasion of privacy have been vague. For example, in China’s first facial recognition lawsuit that took place in Hangzhou, a law professor sued a local zoo for denying entry to customers who did not use its new facial recognition access control system.
He said that the new directive from the Supreme Court, which will come into effect on August 1, will provide a clear legal basis and guidance for local courts on how to handle similar cases.
However, the Supreme Court decision on facial recognition technology only covers civil disputes. Chinese police and other government authorities are still legally empowered to use facial recognition technology for the purposes of public security.
Chinese police, for instance, have taken advantage of facial recognition cameras at airports and stadiums to spot wanted criminal suspects. The traffic authority in the southern tech hub of Shenzhen has used facial recognition technology to name and shame jaywalkers.
Coffee machines, facial recognition are features of China’s ‘smart’ public toilet revolution
The “independent consent” requirement means a person’s facial data must be requested separately from other information requests.
As long as facial information is involved, “bundled consent” – a popular digital business practice whereby someone is asked to consent to multiple requests in one swipe – will be outlawed, according to the Supreme Court’s judicial interpretation.
According to this week’s Supreme Court directive, in the case where a resident of a property refuses to use facial recognition for access control and requests an alternative entry method, courts should support such requests.