人脸识别的法律规制

Legal Regulation of Face Recognition

人脸信息属于个人生物信息,具有独特性、直接识别性、不可更改性、易采集性、不可匿名性等特征。目前,人脸识别技术在实践中参差不齐,误差很大,尽管其可能会在一定程度上节省人力成本,但其风险也不可小觑。人脸识别技术的风险大于收益的可能性是存在的。鉴于人脸识别的应用场景很多,应采取场景理论、风险预防理论以及在此基础上提炼的同一性与差异性相结合的规制原理予以规制。具体来说,我国应对人脸识别建立健全一体适用的安全与责任底线,区分公私部门并配置不同的规制重心,同时对人脸信息的采集施加比对一般个人信息的采集更强的规制力度。

Face information belongs to personal biological data and has the characteristics of uniqueness,direct identification,unchangeability,easiness to collect,and non-anonymization.Because the current face recognition technology is uneven in practice,the error is very large,although it may save manpower costs to a certain extent.It's risk is not to be underestimated.The possibility exists that the risk of face recognition technology is greater than the benefits.In view of the application contexture of face recognition,it should be regulated by the theory of contextual integrity,precautionary principle,and theory of the sameness and difference regulation.Specifically,China should establish a sound security and responsibility bottom line for face recognition,distinguish between public and private sectors and configure different regulatory priorities,and impose stronger regulation on collecting facial data than general personal data.