UK Police Facial Recognition: Where It Is and What the Law Says
By Scott Anderson, Clearfront maintainer
UK police are scanning faces in public with live facial recognition, and it is spreading, from vans at events to permanent cameras on a London high street. Yet there is no law that specifically authorizes it. Here is where it is deployed, what the courts have said, and what your rights are.
Is police facial recognition legal in the UK?
It is being used, but there is no specific law authorizing it. Police rely on general common-law powers and data protection duties rather than a dedicated statute, and that legal basis is contested.
This is the crux of the whole debate. The words facial recognition do not appear in any Act of Parliament. Forces run it under general powers, write their own rules for who goes on a watchlist, and set their own thresholds. Civil-liberties groups argue that is not a proper legal basis for scanning the faces of people going about their day.
Where is live facial recognition deployed?
Mainly by the Metropolitan Police and South Wales Police. The Met has installed the UK’s first permanent facial recognition cameras, on a high street in Croydon.
- -The Met: mobile deployments across London, plus permanent cameras in Croydon piloted from October 2025 to March 2026
- -South Wales Police: regular deployments in town centres and at major events, resumed in 2023 after a legal challenge
The Met reported 173 arrests across 24 operations during the Croydon pilot and said watchlists were created shortly before each deployment and deleted afterwards. Supporters point to those results; critics question the expansion of permanent scanning of a public street.
What did the Bridges case decide?
In 2020 the Court of Appeal ruled South Wales Police’s earlier use of facial recognition unlawful, because the legal framework was too vague and left too much to officers’ discretion.
Bridges v South Wales Police is the leading case. The court found the use breached the right to privacy because it was not in accordance with a clear enough law, breached data protection duties through an inadequate impact assessment, and breached the public sector equality duty. South Wales Police changed its approach and resumed deployments in 2023, but the underlying question, whether there is an adequate legal framework, is exactly what remains disputed. Liberty’s summary of the case is here ↗.
Is it accurate, and is it biased?
Police cite independent testing showing very low error rates at their settings; critics argue the technology is deployed unevenly and its rules are set by the forces themselves.
Both things are worth stating fairly. The Met reported one false alert in more than 470,000 faces scanned in Croydon, and South Wales Police cite National Physical Laboratory testing that found no significant demographic bias at their operating thresholds. Groups like Big Brother Watch and Liberty counter that deployments concentrate in certain areas, that watchlist criteria are opaque, and that the human rights regulator has called the legal basis insufficient and urged a pause.
What is happening with the law?
The government has accepted the current framework is inadequate and is consulting on a new one. That is a proposal, not a law yet.
In July 2025 the Home Secretary said the government would create a proper governance framework, and the Home Office ran a public consultation on a legal framework for police use of facial recognition from December 2025 to February 2026. As of now it is still at the consultation stage; there is no new Act in force. The consultation is on gov.uk ↗. Note also a common myth: the Data (Use and Access) Act did not abolish the surveillance camera and biometrics watchdog. That proposal was in an earlier bill that fell; the role survived and was permanently filled in November 2025.
What are your rights?
There is no opt-out from public police facial recognition; if you pass an active camera, your face is scanned. But non-matches are supposed to be deleted immediately, and you can complain to the ICO.
- -You cannot opt out of being scanned by a live deployment in public
- -If you are not on the watchlist, your face data should be deleted near-instantly
- -You can complain to the ICO about a deployment, and the surveillance camera commissioner oversees police use
- -Walking away from a visible facial recognition zone is not, in itself, grounds for suspicion, though enforcement practice is contested
This is the surveillance most people never consented to and cannot avoid. Knowing the shaky legal footing it stands on, and that a proper framework is still only being consulted on, is the starting point. For the vehicle equivalent, see are Flock cameras tracking UK drivers.
Frequently asked questions
- Is police facial recognition legal in the UK?
- It is in use, but no specific law authorizes it. Police rely on general powers and data protection duties, which campaigners and the Court of Appeal in the Bridges case have found inadequate. The government is consulting on a proper legal framework.
- Where are the permanent facial recognition cameras in the UK?
- The Metropolitan Police installed the UK’s first permanent live facial recognition cameras in Croydon, south London, piloted from October 2025. Other use, by the Met and South Wales Police, is mobile.
- Can I refuse to be scanned by facial recognition?
- Not in a public deployment; every face that passes an active camera is scanned. If you are not on the watchlist your data should be deleted immediately, and you can complain to the ICO about a deployment.
Sources and further reading
Scott Anderson believes your personal data is yours to own and protect. He built Clearfront, a free, open-source tool for scanning and scrubbing your own digital footprint from public data, and he writes about OSINT, breach exposure, and personal privacy.
Related posts
- Are Flock Cameras Tracking UK Drivers? What ANPR Actually Does
Flock cameras are a US surveillance story. In the UK the cameras reading your number plate are the national ANPR network. Here is what it records and your rights.
- Is UK Age Verification Safe? What Happens to Your ID and Face Scan
UK age checks often mean uploading ID or a face scan to a third party. Here is how age verification works, the real privacy risks, and how to spot a safe check.
- How to Check Your Digital Footprint in the UK (Self-OSINT)
The UK self-audit uses different records than the US one: the electoral register, 192.com, Companies House, the Land Registry. Here is the UK walkthrough.