Sidebar

Exclusive Reports

19
Fri, Apr

Tech Security
Typography
  • Smaller Small Medium Big Bigger
  • Default Helvetica Segoe Georgia Times

Facebook has started asking European and Canadian users to let it use facial recognition technology to identify them in photos and videos.

The social media company originally began face-matching users outside Canada in 2011, but stopped doing so for EU citizens the following year after protests from regulators and privacy campaigners.

The new request is one of several opt-in permissions being rolled out in advance of a new data privacy law.

The move is likely to be controversial.

The company is currently embroiled in a privacy scandal related to the use of its members' personal information by the political consultancy Cambridge Analytica.

The social network is also facing a class-action lawsuit in the US for deploying the facial recognition technology there without users' explicit consent.

"Biometric identification and tracking across the billions of photos on the platform exacerbates serious privacy risks to users," commented Silkie Carlo, director of UK civil liberties group Big Brother Watch.

"Facebook now has a duty to prove it has learned how to respect the law, not to prove it can take its surveillance capabilities to new depths."

Users outside the EU and Canada will be prompted to review a similar set of privacy controls in the coming months, but they will continue to be subject to facial recognition unless they opt out of the system.

The facial recognition facility works by assigning each user a unique number called a template. This is calculated by analysing the way they look in their profile photograph and other images they have already been identified in.

Untagged faces are then represented in a similar manner and compared to the database of templates.

When a match is found, Facebook prompts both the person posting an image and the people appearing in it to apply the relevant name tags. In addition, it uses the tech to detect when a scammer is attempting to use a stolen photo as their profile picture.

It also helps Facebook to offer new "friends" suggestions.

When new connections are made, users have more reason to spend longer on Facebook's app and website.

This lets the firm show them more adverts while also helping it learn more about their interests, which in turn lets it better target future ads.

The new settings are being deployed ahead of the EU's General Data Protection Regulation (GDPR), which comes into force on 25 May.

The law tightens existing privacy rules, forbids the use of pre-ticked boxes for consent, and increases the amount organisations can be fined for non-compliance.

Facebook will also be seeking for the following consent to meet its new obligations:

 If a member has added information about their religious views, political beliefs or sexuality, they will be asked whether they agree to continue allowing that information to be displayed to others and whether they permit Facebook to use the data to target ads and provide other personalised recommendations.

 users will be asked if they authorise data gathered from elsewhere - including third-party websites and apps, to be used to pick which ads are shown to them on Facebook and Instagram.

Under GDPR, children are also afforded added protections, which the EU's members can decide to limit to those under 13 or extend to those under 16.

Facebook already bans under-13s from being members.

But in affected countries, it will now ask under-16s for the permission of a parent or guardian to:

 show adverts based on their interests
 include their religious and political views in their profiles
 allow them to express their sexuality by registering whether they are "interested in" men, women or both.

To achieve this, the firm will either require them to send a permission request via Facebook itself or provide an email address that the older party can be reached at.

In the case of the latter, the company has confirmed that it will rely on the youngsters to provide an accurate address and does not plan its own identity checks.

BBC

BLOG COMMENTS POWERED BY DISQUS