[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fYfakRysT4w_KP0_2LSgjN-qIHDZtujHv3pLKlBgGXI8":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":49},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"ccd4ee4a-095f-4b6e-85bc-cde134ee112b","Brit police watchdog says cops' use of facial recog risks wrongful arrests","brit-police-watchdog-says-cops-use-of-facial-recog-risks-wrongful-arrests-e59e90","New report calls for change, highlights hodgepodge governance and misunderstanding about tech’s limitations among officers","A report by the UK's Criminal Justice Inspectorate (HMICFRS) has found that police forces' use of retrospective facial recognition (RFR) technology risks wrongful arrests due to a lack of understanding and fragmented governance. The inspectorate highlighted that existing legislation has not kept pace with the technology and called for a statutory code in the forthcoming Police Reform Bill to establish nationwide standards. Some investigators mistakenly believed RFR results constituted evidence rather than intelligence, leading to inappropriate investigative actions in a small number of cases.","UK police facial recognition use risks wrongful arrests, watchdog report finds.","https:\u002F\u002Fwww.theregister.com\u002Fsecurity\u002F2026\u002F11\u002F13\u002Fbrit-police-watchdog-says-cops-use-of-facial-recog-risks-wrongful-arrests\u002F5309379","https:\u002F\u002Fimage.theregister.com\u002F?imageId=5247722&width=800","2026-11-13T10:15:00+00:00","2026-11-13T11:00:14.736848+00:00",7,[17,20,23],{"name":18,"type":19},"retrospective facial recognition","technology",{"name":21,"type":22},"Palantir","vendor",{"name":24,"type":25},"NHS cancer app","product","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":26,"icon":28,"name":29,"slug":30},null,"Policy","policy",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",[],[21,24],{"controls":47,"vendors":48},[],[],{"slug":50,"title":51,"body":52,"framework_refs":53,"framework_notes":59},"facial-recognition-misuse-highlights-governance-gaps-and-training-failures-in-uk-policing","Facial Recognition Misuse Highlights Governance Gaps and Training Failures in UK Policing","UK police forces are deploying retrospective facial recognition technology without consistent training, standards, or legal frameworks, creating serious risks of wrongful arrests. A core failure was that investigators treated RFR outputs as evidence rather than intelligence leads, a fundamental misunderstanding of the technology's reliability and proper role. Without a statutory code of practice or nationwide governance, each force operates differently, making accountability and oversight nearly impossible. This matters because biometric misidentification has direct, life-altering consequences for innocent individuals, and the absence of regulatory guardrails means errors can persist unchecked.",[54,55,56,57,58],"GDPR Article 9","GDPR Article 35","NIST SP 800-53 AT-3: Role-Based Training","NIST CSF 2.0 GV.PO-01: Policy","NIS2 Article 21(2)(a)",{"GDPR Article 9":60,"GDPR Article 35":61,"NIS2 Article 21(2)(a)":62,"NIST CSF 2.0 GV.PO-01: Policy":63,"NIST SP 800-53 AT-3: Role-Based Training":64},"Facial recognition processes biometric data, which Article 9 classifies as special-category data requiring explicit legal basis and stringent safeguards — absent here due to fragmented governance.","Article 35 requires a Data Protection Impact Assessment before high-risk biometric processing; inconsistent or absent DPIAs across forces allowed risky deployments without proper scrutiny.","This point requires risk analysis and documented information system security policies, which were absent for RFR deployment, leaving forces without a consistent basis for assessing the risks of acting on biometric intelligence.","This category requires that organisational cybersecurity and technology policies be established and communicated; the absence of a statutory or unified policy framework left each force without consistent operational rules.","AT-3 requires that personnel with specific technology responsibilities receive role-based training; investigators lacked adequate training on the evidential limitations of RFR outputs, directly causing misuse."]