China has introduced sweeping regulations to govern the use of facial recognition technology, aiming to address rising concerns about data security and individual privacy in the face of its rapid nationwide adoption.
The new measures, issued jointly by the Cyberspace Administration of China (CAC) and the Ministry of Public Security (MPS), will officially take effect on June 1, 2025.
Key Provisions in the New Law
🔐 Voluntary Participation:
Individuals cannot be forced to use facial recognition for identity verification. Organizations must offer non-biometric alternatives, ensuring participation remains optional.
📄 Explicit Informed Consent:
Before collecting or processing facial data, organizations must disclose:
- The purpose
- The method of collection
- The data retention period
Consent must be clear, informed, and voluntary.
🛡️ Data Security Protocols:
Entities must adopt strong cybersecurity measures to prevent leaks or unauthorized access.
- If storing data for over 100,000 people, organizations must register with provincial-level cyberspace authorities within 30 working days.
🚫 Restrictions in Private Spaces:
Facial recognition cameras are banned from private areas like:
- Hotel rooms
- Public restrooms
- Fitting rooms
- Toilets
📢 Public Transparency:
In all public areas where facial recognition is used, signs must be prominently displayed to inform individuals about the technology’s presence and purpose.
💡 Non-Biometric Preference:
When alternative methods are equally effective, organizations are urged to avoid using facial recognition to limit unnecessary collection of sensitive data.
Why These Rules Matter
Facial recognition has been widely deployed across China’s transportation systems, financial services, law enforcement, and commercial spaces. While it has improved efficiency and public safety, critics have long warned of unchecked surveillance and privacy intrusions.
In a 2021 survey, 75% of Chinese citizens expressed concern over the technology, with 87% opposing its use in public commercial areas.
In response, the CAC began a public consultation in August 2023, gathering feedback from individuals, companies, and advocacy groups—signaling a shift toward greater accountability.
Compliance & Enforcement
All organizations using facial recognition must now:
- Conduct compliance assessments
- Update data collection practices
- Strengthen security frameworks
- Establish transparent consent systems
Violators face civil and criminal penalties, reinforcing the seriousness of compliance.
A Step Toward Balanced Innovation
China’s new facial recognition regulations aim to strike a balance between technological advancement and citizen protection.
By requiring clear consent, data transparency, and strict security protocols, the rules set a new standard for the responsible use of biometric technologies—not just in China, but potentially worldwide.
