WP29 | EU | Opinion [...] on facial recognition in online and mobile services (PDF)
From the introduction:
“Online services, many owned and operated by private organisations, have built up vast collections of images uploaded by the data subjects themselves. In some cases these images may also be unlawfully obtained by scraping other public sites such as search engine caches. Small mobile devices with high resolution cameras enable users to capture images and link in real-time to online services through always-on data connections. As a result users are able to share these images with others or perform identification, authentication/verification or categorisation to access additional information about the known or unknown person standing before them. Facial recognition in online and mobile services therefore requires specific attention from WP29 as the use of this technology presents such a range of data protection concerns.”
(Source: insideprivacy.com)