The UK Is Building a National Facial Recognition Framework.
In December 2025, the UK Home Office launched a 10-week public consultation on a new legal framework for law enforcement use of facial recognition, biometrics, and related surveillance technologies. The consultation closed on 12 February 2026. Responses have now been published from the Biometrics and Surveillance Camera Commissioner, the Information Commissioner's Office, and several civil liberties organisations including Liberty, Statewatch, Privacy International, and the Ada Lovelace Institute.
What the government proposed
The consultation document asked 17 questions about which technologies and organisations a new legal framework should cover, what factors should determine proportionate use, and what oversight and accountability mechanisms should be established. It covered three categories of facial recognition already in use by police in England and Wales:
Retrospective facial recognition (RFR), used after an incident to compare crime scene images against custody photos on the Police National Database. Over 25,000 RFR searches are carried out each month. Live facial recognition (LFR), using cameras in public spaces to compare faces in real time against a watchlist. Six police forces currently use LFR: the Metropolitan Police, South Wales Police, Northamptonshire Police, Bedfordshire Police, Hampshire Police, and Essex Police. Operator-initiated facial recognition (OIFR), a mobile app allowing officers to check identity on the street without arresting the person.
The consultation was published alongside a Home Office public attitudes survey and new guidance on police use of the technology. Crime and Policing Minister Sarah Jones described facial recognition as "the biggest breakthrough for catching criminals since DNA matching". The government disclosed it spent £12.6 million on facial recognition in the previous year, including £2.8 million on live facial recognition deployed in fixed-location pilots and vans.
The consultation also asked whether police should be allowed to search public records such as passport and driving licence databases. Currently, police must request that the Home Office conduct these searches on their behalf under a standard set of criteria. A legal challenge expected in 2026 will test whether police can search passport and immigration photos without explicit consent.
The Commissioner's response
The Biometrics and Surveillance Camera Commissioner, Professor William Webster, published his response on 24 February 2026 . It is the most detailed public response to the consultation.
Webster described the consultation as "a once-in-a-generation opportunity to get a legal framework right." His response called for a principles-based framework rather than a technology-led one, arguing that legislation focused on specific technologies will quickly become outdated. The framework should instead define the purposes, principles, and activities to be regulated, with technology-specific requirements set out in secondary legislation and codes of practice that can be updated as technology evolves.
The Commissioner recommended a legally codified restrictive approach, modelled on the Investigatory Powers Act 2016. Under this model, conducting a specified surveillance activity would be an offence unless strict criteria set out in legislation and codes of practice are met. This inverts the current position, where no specific law governs police use of facial recognition and deployment has expanded without parliamentary debate.
On scope, the Commissioner argued the government's proposal to cover only law enforcement organisations is too narrow. Many surveillance camera systems used by police are operated by local authorities, retailers, and other private organisations, with footage shared with police on request. Limiting the framework to law enforcement would create a two-tier system where equally intrusive surveillance by other bodies remains unregulated, and the data generated by those systems could still be used for law enforcement purposes.
On the proposed new regulator, the Commissioner called for a single statutory body with independence from government, powers enshrined in primary legislation, and direct reporting to Parliament. The regulator must have powers of audit, inspection, and compliance, including the ability to issue compliance notices, instruct organisations to stop using a technology, and seek injunctions. It should incorporate an independent advisory panel with representation from affected communities, a public engagement function, and a foresight capability for emerging technologies.
The response also addressed database access. If passport, driving licence, and other government databases are to be used for facial recognition, they must be subject to the same principles and safeguards as the framework itself, with clear rules governing acquisition, retention, use, and destruction of facial images.
Other responses
The Information Commissioner's Office submitted a response, as did multiple civil liberties organisations.
Statewatch, in a submission published in February 2026, stated that "the use of facial recognition and similar technologies should be prohibited in most cases and otherwise restricted to only very specific circumstances." The organisation argued that the cumulative effect of LFR amounts to mass surveillance, that it is fundamentally incompatible with human rights protection, and that its use "cannot be effectively regulated and must, therefore, be prohibited".
Liberty noted that no laws in the UK mention facial recognition, its use has never been debated by MPs, and called on the government to halt the rapid rollout until safeguards are in place.
The Ada Lovelace Institute published analysis finding that the UK's current patchwork of voluntary guidance, principles, and standards is inadequate, describing the mass rollout of facial recognition as existing in a "legal grey area".
Privacy International launched a campaign titled "End of Privacy in Public" and published a detailed briefing arguing that the UK government has directly encouraged and enabled the rapid expansion of FRT use without adequate regulation.
ARTICLE 19 wrote to the Prime Minister stating that live facial recognition "operates in a legal and democratic vacuum" and is not compatible with the European Convention on Human Rights.
The EU divergence
On 2 August 2026, the EU AI Act becomes fully applicable. The Act prohibits real-time biometric identification in publicly accessible spaces for law enforcement, with narrow exceptions. It also prohibits AI systems that indiscriminately scrape images from the internet or CCTV to build or expand facial recognition databases.
The UK is moving in the opposite direction. The consultation explicitly aims to give police forces greater confidence to use facial recognition "at a significantly greater scale." New laws are expected in approximately two years. In the interim, testing and deployment continue. The Metropolitan Police made 1,300 arrests using facial recognition over the previous two years, including what the government described as rapists, domestic abusers, and violent criminals.
The digital ID question
In March 2026, reports emerged connecting the UK's new digital ID system to the facial recognition framework. The Home Office consultation document explicitly acknowledged that the digital ID system would be subject to "any new legal framework introduced" following the facial recognition consultation, which proposed authorising police use of facial recognition against government records. Cabinet Office minister Darren Jones told reporters that "none of that is true" when asked about police access to digital ID photographs. The consultation document his own government published says otherwise.
What happens next
The consultation is closed. The government has not announced a timeline for publishing its response or introducing legislation. The Commissioner's response recommended that new laws take a restrictive, codified approach with an independent regulator empowered to enforce compliance, but acknowledged that "the precise operational mechanisms" remain to be determined. In the meantime, six police forces continue to deploy live facial recognition in public spaces across England and Wales, with no specific statute governing its use and no parliamentary vote having authorised it.
Sources:
Home Office consultation document: https://www.gov.uk/government/consultations/legal-framework-for-using-facial-recognition-in-law-enforcement
Government announcement (4 December 2025): https://www.gov.uk/government/news/government-pledges-to-ramp-up-facial-recognition-and-biometrics
Biometrics and Surveillance Camera Commissioner response (24 February 2026): https://www.gov.uk/government/publications/commissioners-response-to-the-live-facial-recognition-consultation/commissioners-response-to-the-live-facial-recognition-consultation-accessible
ICO consultation response: https://ico.org.uk/about-the-ico/consultations/2026/02/home-office-consultation-on-a-new-legal-framework-for-law-enforcement/
Statewatch submission: https://www.statewatch.org/news/2026/february/submission-to-home-office-consultation-on-a-new-legal-framework-for-law-enforcement-use-of-biometrics-facial-recognition-and-similar-technologies/
Liberty facial recognition page: https://www.libertyhumanrights.org.uk/fundamental/facial-recognition/
Ada Lovelace Institute press release: https://www.adalovelaceinstitute.org/press-release/mass-facial-recognition-roll-out-exists-in-legal-grey-area/
Privacy International briefing: https://privacyinternational.org/long-read/5682/toward-regulation-addressing-legal-void-facial-recognition-technology
ARTICLE 19 letter to PM: https://www.article19.org/resources/uk-pm-rethink-plans-for-facial-recognition-surveillance/
House of Commons Library briefing (March 2026): https://commonslibrary.parliament.uk/research-briefings/cdp-2024-0144/
Biometric Update reporting: https://www.biometricupdate.com/202512/uk-tucks-biometric-bias-reports-deep-into-police-facial-recognition-plan
State of Surveillance analysis: https://stateofsurveillance.org/news/uk-national-facial-recognition-framework-2026/