Article 5(1)(e)
CurrentFrom 2 Feb 2025Do Not Create or Expand Facial Recognition Databases Through Untargeted Image Scraping
Applies to Provider; Deployer.
- Actors
- ProviderDeployer
- Themes
- Governance & Accountability
Tracker Networks Guidance
Your organization should not create or expand a facial-recognition database through untargeted scraping of facial images from the internet or CCTV footage.
Official text
(e) the placing on the market, the putting into service for this specific purpose, or the use of AI systems that create or expand facial recognition databases through the untargeted scraping of facial images from the internet or CCTV footage;
Suggested controls
AI Inventory and Use-Case Classification
Maintain an inventory of AI systems/use cases and classify them by regulatory role, use, risk category and relevant conditions.
Prohibited AI Practice Screening and Approval
Screen proposed AI systems and use cases for prohibited practices before procurement, development, deployment or material change.
Biometric AI Use Governance
Apply enhanced approval and safeguards to biometric identification, categorisation and emotion-recognition use cases.
Related risks
Use of Prohibited AI Practices
The organisation may develop, procure or use AI in a manner prohibited by applicable AI regulation.
Unlawful or Inappropriate Biometric AI Use
Biometric identification, categorisation or emotion-recognition AI may be deployed outside permitted conditions or without adequate safeguards.