What happened?
According to a report by Golem.de, the German Federal Criminal Police Office (BKA) is considering anonymized access to commercial providers of biometric facial recognition. The reporting cites Clearview AI as an example of such a provider — a company that operates large databases of facial images collected from the internet and offers matching capabilities to law enforcement agencies.
The underlying source material, beyond the cookie and tracking components of the Golem website, provides only limited details on the actual matter. Key facts such as the exact scope of the planned access, the legal basis, or a concrete timeline cannot be derived from the available material and should therefore be considered not yet known.
The Details
Clearview AI is a US company that has built one of the largest known facial recognition databases by mass-scraping facial images from publicly accessible internet sources. Such services allow authorities to match a photo of an unknown person against the database in order to determine possible identities.
The reporting suggests that the BKA is seeking access to such providers in a way that would anonymize the queries. What specific technical or organizational measures are planned to ensure this anonymization is not evident from the available source material. Likewise, there is no information on costs, the scope of the planned use, or a possible legal review by data protection authorities.
Assessment
For the security industry, and particularly for players in video surveillance and access control, this development is fundamentally significant, as it indicates the direction in which the use of biometric recognition technologies by law enforcement agencies could be heading. Facial recognition services like Clearview AI have long been criticized internationally by data protection authorities, as they collect and process image data without the consent of the individuals depicted.
Anonymized access by a federal agency would mark a new gray area between law enforcement, data protection, and the use of commercial databases built outside of state control. For operators of security systems — for example, in the field of video surveillance with facial recognition functionality — it is relevant to monitor how the legal and societal debate around such technologies develops, as this could indirectly affect the permissibility and acceptance of their own systems.
Practical Tips
- Operators of video surveillance systems with biometric functions should closely follow the current legal debate on facial recognition, as regulatory changes may result from it.
- Companies that maintain their own image databases for access control or surveillance should document the origin and legality of the data used, in order to be able to respond to inquiries from authorities or data protection bodies.
- Security officers within companies should assess the extent to which their own systems interact with or exchange data with external recognition services, and communicate this transparently to those affected.
Outlook
Since the available source material contains no further information on the timing, implementation, or legal assessment of the planned BKA access, it remains unclear how the project will develop in detail. It can be assumed that further reporting, as well as possible statements from data protection authorities, will follow once more precise details of the plan become known. The topic remains relevant for the security industry, as how state authorities handle commercial biometric databases could, in the long term, also affect the regulatory framework for private security technology.
