UK businesses using facial recognition, biometrics face new codes of practice
The UK is introducing new codes of practice for businesses that use facial recognition and other biometric technologies. The guidance targets commercial use of these tools, signaling tighter expectations around how companies collect and process biometric data.
Why this matters: Biometric data is not like a password. You cannot change your face. When a business scans you, it captures something permanent, and if that data is mishandled, the harm follows you. The UK is now telling companies that using these tools comes with real rules, not just good intentions. That matters for anyone who shops, works, or moves through spaces where cameras are running. The codes have not been published yet, but the direction is clear: collect biometrics, and someone is watching how you do it.
Who should care: Privacy officers · Cybersecurity · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.