What we have achieved so far on AI and biometrics

We’ve already acted to safeguard people and enable innovation in some of the most significant areas of AI and biometric technologies. Highlights include:

• on AI and ADM:
  • providing guidance and resources on AI and data protection and automated decision-making and profiling, enabling organisations to comply with confidence;
  • responding swiftly to the rapid emergence of generative AI with clarity on its lawful development and use, including joint positions with the Competition and Markets Authority;
  • intervening directly with developers of generative AI products (eg Snap and Meta) to address emerging risks to people’s information; and
  • auditing developers and providers of AI tools in recruitment to identify risks and strengthen compliance in real-world settings.
• on biometrics:
  • taking enforcement action where biometric technologies pose risks to people’s rights (including action against Clearview AI and Serco Leisure for unlawful use of facial recognition);
  • publishing guidance on biometric recognition systems to help organisations understand how data protection law applies and what good practice looks like;
  • issuing two Commissioner’s Opinions on the fair and proportionate use of live facial recognition in public spaces, by both law enforcement and private organisations; and
  • undertaking research and engagement to better understand the privacy implications of biometric technologies. This includes joint work with the Ada Lovelace Institute and British Youth Council on public expectations. 

More broadly, our innovation services provide organisations with expertise and advice to help them innovate responsibly, respecting people’s privacy. Current and past participants have included organisations innovating with AI and biometric technologies. 

We will build on this work over the next year (2025/26), promoting high standards of data protection and trust in the use of AI and biometric technologies.