EU considers temporary ban on facial recognition in public spaces
reuters.com
reuters.com
She has been such a force in the European Union during her short time in the Commission. I'm glad she's still spearheading stuff like this even if she didn't become president like some thought she would when Macron started promoting her.
The funny thing is that she was also officially second in command when she was in the Danish coalition government a decade ago, but somehow the government's official policies were much closer to _her_ party's ideology (Social Liberal) than the ideology of the much bigger Social Democratic party that they were in a coalition with.
There are two operative components: cameras & software. They don't need to be on the same device or used by the same person. Increasingly, if the cameras exist, the "data" is likely to go through software at some point.
Facebook, Apple, Google or whatnot... they do facial recognition & other classification by default. Any publicly available pictures can be crawled & analysed by aggregators... or whoever wants to. Most people use services that analyse image content, make images public, or both.
These aren't just theoretical loopholes. There are tons and tons of private cameras out there. These will continue to "do facial recognition," or lead to it.
This can probably only be a ban on certain users: police... maybe some classes of regulatable businesses. This might be ok, but I don't get the impression decision makers know this.
It just seems ridiculous to have officers scanning CCTV for the FBI's Most Wanted when algorithms could effectively and responsibly assist them.
We don't need to compete with others on technologies whose primary purpose is diminishing the rights of our own citizens, that's not an arms race we need to be part of and it seems to be increasingly the rhetoric tech companies adopt as well.
One piece that I read recently that I found particularly disturbing talked about aerial surveillance of US cities.
https://longreads.com/2019/06/21/nothing-kept-me-up-at-night...
In all of human history, as soon as people get fed, they turn into a group dick measuring contest. Well meaning people who are totally nice starts waving the banners at the sidelines. Politicians dress up impeccably and speak beautiful language at the center stage - to conduct this dick measuring contest.
One of the big reason I like computers and software is that it seemed to be borne out of genuine interest than out of dick waving necessity.
I guess I should start working for an open source company.
Open source can also be mostly building things that are pointless or already exist.
It's tough, because the variety and freedom is the whole point. But it feels wasteful.
The vast majority of modern technology are mainly improvements on past solutions. And the process is entirely darwinistic: only those improvements that come with the least amount of friction will be adopted by a large enough number of users.
The same is true for science. Few people get to crack truly foundational problems. Most people work on different ideas and approaches that refine existing solutions, until the scientific community converges around a new incumbent solution or idea. Then the cycle begins again when a new idea or solution enters the domain. Rallying our collective brain power towards a few or even a single idea or solution will slow that feedback cycle.
So, working on a variation of an existing thing isn't necessarily bad. Your execution may be better then the incumbent solution and uproot the status quo.
There are also other reasons why working on an existing problem may yield benefits:
You learn more about the process. For instance, a simple todo application isn't interesting in itself. But going through the process of building one and finding out how to do that efficiently: that's where you'll find value. Those experiences and lessons you take to the next project which may be your own or part of a bigger mission or vision.
If you work with other people, you are practicing your communication skills and your people skills. Both are hugely valuable as well. The most impact you can have isn't necessarily through writing code on your own, but by coaching and supporting others; clearing impediments and clarifying problems by reframing them.
If you cling on to the notion that building something entirely new is the only relevant measure of success, you set yourself up for failure.
Couple of observations:
1. Large amounts of open source projects which seem to ego-driven (i.e. done not to provide genuine improvement, but done for amusement and promotion of the author).
2. Same for conference appearances (speaking at a conference to be able to say one spoke at a conference).
3. Commercial software in sorry state in order to maximize company profits, i.e. increase dick size of the owners.
It's impossible to escape our nature, no matter what field.
I'd argue that if done for amusement, it's rather self-fulfilment than dick waving. Spinning the metaphor, some of us are not open-sourcing their project to put their external organs in other's face, but rather publish "just in case" someone may be interested in bootstrapping another project from here.
While that kind of thing does happen, many of the participants in older active projects seem to be driven by a genuine desire to improve things for our fellow people.
I'm not on board with those who say the desire for glory is automatically a bad thing, though (although I admit that it is something that I don't really understand).
Did you ever notice computer manufacturers playing on specs and retina to sell their products? That is pure dick waving. It's everywhere.
> One of the big reason I like computers and software is that it seemed to be borne out of genuine interest
A genuine interest in artillery trajectories and cryptoanalysis? I don't think so.
Let's change the narrative then. A dick measuring contest in terms of public privacy.
Cambridge, MA is heading in the same direction: https://www.boston.com/news/local-news/2020/01/14/cambridge-...
For example, it is a long-standing hypothesis of mine that countries become more democratic precisely because democracy is a nice thing for a government to claim to support—and then, two generations later, everyone running the government was brought up to think that their country was “democratic”—and so acts under the assumption that it is democratic, applying concepts like “rule of law” and “constitutional rights” and so forth, because they know that those are what democratic nations do.
That said, I can see some countries vetoing such an EU-wide ban if it applied to all law enforcement.
https://edpb.europa.eu/news/national-news/2018/first-austria...
(If you've got a garden in front of your house or so, I don't see a problem)
It's a good thing even if it doesn't apply to governments, although it would be even better if it did.
And I'm tired of people imposing arbitrary limitations on technology in the name of "privacy". It's become another one of these ideas that you just can't question without becoming a bad person in some circles. Why? Why can't we ask whether "privacy" is so precious that we should preserve it at any cost?
Much of the supposed loss of privacy comes from technological development normalizing the exceptional. Now everyone can have an unblinking ever-watching doorbell. So what? You can't roll back progress. What you can do is embrace new technology, accept its downsides (almost always over-played), and figure out how to use new capabilities to make life better. (For example, we can lower crime.) These people beating the "privacy" drum don't acknowledge that there are real regulatory and opportunity costs coming from the measures needed to preserve this "privacy" and that ordinary people might prefer not paying these costs if they were fully aware of the trade-offs.
What specific and concrete unjustified harm has ever come to someone as a result of public facial recognition?
[0] https://www.telegraph.co.uk/technology/2018/11/25/chinese-bu...
Saying there aren't good, documented examples of 'concrete', 'specific' harm is akin to saying that hydrogen bombs are not dangerous because they've never been dropped on people.
The harm is to peoples' expectation of privacy in a public place, which is non-zero. For example, if I'm walking around town talking to my partner, I don't expect random strangers to keep pace with us and eavesdrop on our conversation, because, even if it's in a public place, it's a private conversation.
In the same way, I don't expect private or public organisations to watch my every move and keep track of where I go, what I do and whom I speak to, every single day, which is possible with facial recognition technology and is, by its indiscriminate nature unjustified.
You 're probably not happy with this reply because you have framed the question as "concrete and unjustified harm", which strongly implies either financial as physical harm. But there is concrete and significant harm that can come to persons that is not financial or physical and that is nonetheless recognised by law. For example, Article 4 of the European Human Rights Convention makes slavery and servitude illegal without any precondition that violence is exerted, or the person is otherwise harmed physically or in any other way than being in servitude, i.e. the harm is recognised as being caused by the condition of servitude itself. And you can rest assured that nobody takes slavery and servitude lightly at least in most European countries who are signatories to the treaty.
How does one become enslaved without the threat of physical or financial harm?
Juju magic 'more controlling than chains', says Harvard expert
https://www.bbc.co.uk/news/uk-wales-29599158
And, unfortunately, the threat seems to work pretty well, even if "juju magic" itself of course doesn't.
Additionally, the threat of physical or financial harm is not itself physical or financial harm.
So that's a kind of harm other than physical or financial harm. My assumption was that the "specific and concrete" condition you placed on "harm" in your original comment was meant to mean physical or financial harm.
I have to ask- was I wrong to make this assumption? I apologise if so, but could you clarify what you meant by "specific and concrete" harm?
I would suggest opening up one of the many books that deal with the history of various police states of central, eastern and southern Europe of the last 100 years or so. This continent is scarred to the bone by authoritarianism, millions of nameless graves and all that, if that's not a good enough reason I don't know what to say more. Ignorance of the past is deadly.
And what specific real benefit? If they are going to implement facial recognition, then I would like to see real (not just numbers of) prevented crimes, terrorist attacks, caught criminals, etc. I want to see what my liberties were given for.
If there is 100% facial recognition in every public centimeter square of Europe, then there should be not a single "bad guy" on the loose.
PS: why downvoting parent? Even if I don't agree at 100%, in my opinion it's a very valid PoV and not formulated in a trolling/flaming way.
Actually, I kind-of agree with you. The problem isn't data (i.e. lack of "privacy"). The problem is abuse of this data - by governments (foreign and you own) (e.g. being locked up because you're a spouse of a journalist, or being refused at the border for saying the wrong thing), corporations (FB banning you for supporting the wrong party, insurance premiums rising because you're speeding), even your neighbors (perverts jerking off to videos of your kids)! I hope that someday in the future, we can have a world where all (well, most of) your data is used in your best interest. Unfortunately, the current legislation is, to a large degree, made with the idea that it's not going to be 100% enforceable anyways - so many laws have to change to make that happen... from child porn & consent laws (children shouldn't have the rest of their lives ruined for having sex, or messaging naughty photos of themselves), speeding laws (different countries have different max speed laws, so clearly at least some of them are wrong and/or arbitrary), insurance laws ("preexisting conditions" need to be covered, smoking can't be singled out as the only dangerous behavior), free speech laws (you shouldn't be punished even for the most offensive jokes), ... just some example from the top of my head.
A.k.a. the “Guns don’t kill people” argument.
https://www.independent.co.uk/news/world/politics/switzerlan...
> In 2007, the Small Arms Survey found that Switzerland had the third-highest ratio of civilian firearms per 100 residents (46), outdone by only the US (89) and Yemen (55).
> In 2016, the country had 47 homicides with firearms. The country's overall murder rate is near zero.
(Not saying of course that whatever they do in Switzerland is applicable to any other country, in any kind of short- to medium-term. The best short-term solution for the US might as well be banning/restricting gun ownership.)
But the issue is really more fundamental than that -- why should others be able force me to live a worse sort of life just so they can have cool gadgets?
Maybe it's silly or infeasible but I'd be curious where that could lead. Consider that in some cultures you're not allowed to film/photograph people in public without their consent. So this is a small step toward a technological infrastructure that could enable that social convention.
Which would normalize it even further, as it becomes unavoidable.
I'd rather normalize knowing who's tracking me than normalize the tracking without me even having a chance to know.
You could imagine extending the mechanism to where users can emit a "don't record me" beacon.
Even if it was successfully implemented it wouldn't actually at all tell you whether you're being recorded or not. Then what's the point?
There's precendent for the emission signal in Do Not Track, but I don't think the result is what you want.
The GDPR has serious teeth - by there are still a large number of companies that flaunt the regulations. Like OATH.
Anything the user says to try and opt-out will be used as nothing more than an identifier to continue to track them.
We've already seen all this play out in the websphere. We do not want this to happen the same way in the real world.
That's the exact case in Austria and it's not always a good thing though as most of the times it ends up protecting the wrong doers.
For example as a cyclist you're not allowed to use a dash/action camera because you'd be taping people without their consent so if you get hit by a car and have no witnesses then it's your word against his in court and who can afford the more expensive lawyers.
If you did use an action cam to tape the accident then the driver's lawyers could have the footage dismissed as it was obtained without his consent and he could even sue you and ask compensation for it. Sad world.
Austria just got Google Street View last year as the previous strict privacy laws that were blocking this were relaxed.
https://commons.wikimedia.org/wiki/Commons:Country_specific_...
https://law.photography/law/street-photography-laws-in-austr...
That's not the case. It still can be used, but compensation is also possible.
I believe we also have the most CCTV cameras per person in the world - or at least we’re the ‘most watched’ by sone other measure.
Bear in mind that the vast majority of those cameras are privately-owned (i.e. shops, homes, etc.), not operated by the state.
Here's a picture I took of the deployment: https://borjamoya.com/media/nl/cardiff-facial-recognition.jp...
What I want to say: the UK doesn’t need the EU to protect their citizens privacy.
But I understand what you say: the UK doesn’t seem to care about privacy, if it were in the EU it wouldn’t have a choice but to follow the rules.
I'm very (culturally?) surprised (and was a bit refreshing) that this is something considered negatively. In our country there's always this pressure to add more CCTVs to make the country safer, and CCTVs are generally seen as good, not bad.
I don't really know about UK, but maybe it's the difference of the trust on the government that they won't surveil? Does anybody have pointers on reasons of the difference of the view?
And in top politics there are tons of imbalanced folks who have pretty messed up views on the world and what is right and wrong (normal decent folks wouldn't stand long all the machinations and backstabbing happening constantly)
Of course I'm not advocating blindly trusting the government, but we generally do trust the government until it reveals otherwise.
After all, CCTVs are really just a tradeoff; they are for citizens safety, and accessing it is very restricted for privacy reasons.
> this is sort of one-way road [snip]
> Sooner or later somebody craving for absolute power and control will start abusing it, be it in intelligence or government (or both).
I'm not sure if it really is; democracy is there for a reason. (We have impeached our president in 2017 for various reasons - which for many people in our country, was a living example that sometimes politics work after all :-))
The issue I see is that surveillance is because so miniaturized and easy that I'm not sure if it will be possible to enforce these laws against "the bad guys".
Ideally we should deploy technological countermeasures that prevent anyone from doing mass scale facial recognition. But failing that it may really be better to just have a free for all.
This is a valid argument when speaking of encryption, but I don't see how it makes any sense in this context.
If I am not under investigation I shouldn't be monitored end of discussion.
If I am under investigation, then if my case has not reviewed by a third party (judiciary power/judge) then I also shouldn't be monitored.
It's basic human nature. Without checks and balances those who can abuse, will abuse. It doesn't matter which side they are on.
Property owners doing so on their own land is a whole different matter.
I just don't see it happening at a widespread scale yet. On the other hand if you give police the right to use these technologies you can bet you'll see police (and other government agencies piggybacking off them) deploying this everywhere very fast.
>Although the installation of cameras might be justified for security purposes, the timely and automatic deletion of footage is essential. The EDPS requires all EU institutions to have clear policies regarding the use of video surveillance on their premises including on potential storage.
> Germany’s Interior Minister Horst Seehofer plans to use automatic facial recognition at 134 railway stations and 14 airports, according to a news report published on 3 January.
Source: https://www.euractiv.com/section/data-protection/news/german...
I wonder if that's why Vestager is tackling this issue now.
> Exceptions to the ban could be made for security projects as well as research and development, the paper said.
Is hypocritical
Hardly seems likely they'd ban all video cameras; So sending footage off to a remote location (possibly diff country) to process the file for faces is a trivial side step... Would love to think there's a comprehensive solution to this but it's a difficult thing to just say 'it's banned'.
Maybe for reference, NAL but that's pretty much already the case here in Germany. Save for some exceptions, that are relatively narrow (such as for law enforcement - and even there it's not whilly nilly), you can't just legally place video recording devices in public areas, even moreso if you don't own that space and provide obvious notice. Sending that data off to some remote country would be an even worse, though relatively unrelated, legal nightmare.
A lot of laws are trivial to break, it would be a bad reason to not implement it.
That's probably a break of the GDPR so it will still be against EU law and they are taking the GDPR pretty much seriously, so getting caught is going to be a real risk.
I'm sure there will be at least some attempts, but the legal framework to stop those exists.
Even if they prolong, every tech that might be a morally less questionable offshoot, will also come from said countries.
I think the smarter way would have been regulation, that makes its more transparent, more controllable but keeps a window open for technology to be developed in Europe.
On the one hand, it's tough to do innovative things in EU with its many rules and regulations. OTOH, sometimes they actually protect the citizens.
So, anything that is not a restricted space, e.g. a manufacturing plant, is an open space.
[0] https://www.bankinfosecurity.com/californias-new-privacy-law...
Whilst these are great ideas, this is not really democracy. I think it's also the source of much anti EU sentiment. I wish more of this stuff would be decided in public debates. I wish elections had more of an effect on the EU.
At the moment it feels like policy is being made by academics and beurocrats. And whilst it is good policy, it still feels wrong. I am afraid we are keeping it this way because we think otherwise we would have shite policy.
Literally every single part of the EU apparatus is democratic. Every single bit.
The European Council consists of the Heads of Government of the EU states. If your Head of Government isn't democratically elected then you're already fucked and the EU isn't making anything worse.
The European Commission is chosen by the European Council, so derives its mandate from that.
The European Parliament is literally elected.
The Council of the European Union is basically 'all the agricultural ministers' or 'all the finance ministers' or 'all the defence ministers' etc. Obviously these people all have democratic mandates in their home countries, thus the body as a whole has a democratic mandate.
By no means in any way is there any possible justification for describing the EU has undemocratic. It's actually much MORE democratic than many of its members.
Meanwhile in Australia, government agencies can obtain your phone and internet ‘metadata’ without a warrant and (ISPs^?) DNS servers are required by law to blacklist certain domains.
^ I assume ISPs because I have no issue with blacklists while using CF/Google DNS.
I do think it’s super interesting that the additional gambling site bans happened reasonably quiet last week.
I say reasonably as I play poker, and care if poker is banned, but agree banning gambling is a net positive. Even then I didn’t hear about the ban until 4 days after it happened.
IANAL 99.9% of websites visited from Europe are blatantly non compliant.
In any case Google were fined 50 Million Euro for GDPR violation.
On the other hand it is EU tackling it, so we can expect something as dumb as content filters or as good as GDPR..
EDIT: thankfully someone posted non-paywalled link :)
(Pause)
“Oh shit, I forgot.”
[0] https://www.theguardian.com/technology/2019/oct/04/facial-re...
That Victoria greeter situation sounds terrifying
https://www.theguardian.com/uk-news/2018/sep/13/gchq-data-co...
Your link is inserted in such a way that it looks like it should support the assertion that the security services supported Brexit, but it does not. Do you have a source for that?
But…
…one of the big bug-bears of the newspaper and politicians whom I associate with Brexit is how the Human Rights Act stops the British criminal justice system from doing whatever it wants, including violating the privacy of anyone suspected of Being A Wrong’n.
I know Human Rights Act/European Convention on Human Rights/European Court of Human Rights are different things from the EU. I bet you know that too. Do your neighbours know it? Do they even know what the HRA says or do they say something about Abu Hamza?
Everyone I’ve seen who supports Brexit sees the EU as somewhere between “greedy and incompetent” on the low end and “the unholy spawn of Hitler and Stalin” on the high end (paraphrasing). I am aware that could be Nut Picking on my part, so I’m open minded about how wrong I could be about how other people think.
The security services are supposed to be both secret and impartial, which makes it difficult to directly find out what they want, but campaigning against ECHR has been a common theme of Home Secretaries for years and Brexit is a necessary precondition for leaving ECHR.
And of course, what people wanted from Brexit and what they're going to get are two almost completely unrelated things.
I believe their end goal is centralization of power. In this case, by ensuring control on who can access such information. And it won’t necessarily be by people appointed by those we voted for. Maybe it’s the same with GDPR. I’m not so sure any big government has the pure intention to simply “protect its citizens”.
Using such technology for this purpose is a massive overkill and prone to abuse.
I already resent some of the tracking techniques used by shops today (i.e abusing my cell phone for their tracking). I hope that some enterprising citizens (I see organizations like the CCC) publish lists of shops employing such technology.
Because I, for one, wil make damn sure that they don't get my business. Not! one! penny!
Please no. I find it annoying enough that I can't click on random youtube links for fear of being bombarded with viral trash for the next few weeks. I really don't want to be bombarded by ads just because I looked into a window display for a bit too long.
Edit: Even if this is somehow restricted to small ago owners I don't think they have the right to have my identity because I setup into their shop. I do think a reasonable exception could be carved out to allow monitoring for a specific list of individuals who have been banned from the premises.
That's the exact case most of us want it banned for.
What can be said (Article 13).
Mandatory DRM is on the EU todo.
I love technology as much as anyone but sometimes we have to slow down and consider the potential implications of what we're creating/contributing to. Not all technology is, in-and-of-itself arguably good for humanity.
Privacy is even more detrimental to police capacity to investigate and freedom of speech for you to critize and spread information about any of this, yet most people on HN hand waive these rights away because they are not trendy and there is hostility against them in the media.
Most US-originated tech we widely use today (operating systems, hardware) is US-originated because they were the first to come up with it may decades ago (before EU regulation was a "problem") and it doesn't make sense to reinvent the wheel, and are now using their monopoly power and network effects to prevent new players entering the market (Apple with iMessage for example).
I don't see new tech we missed out on in the last decade because of regulation, so could you please elaborate with some examples?
This seems really doubtful. If anything the wide availability of commercial surveillance data would be a treasure trove for intelligence agencies to sift through.
> Exceptions to the ban could be made for security projects as well as research and development, the paper said.
That is very different from allowing homeowners to automatically identify all people in public places outside their homes.
The issue people have with this surveillance is the abuse that always happens by the government or private companies.
For protecting your private property you should be able to film your property and provide the video to the police.
For crime in public places maybe you can have cameras that are offline and that overwrite the video every n hours,if a crime happens then the police can ask a judge for a warrant only for the cameras in the locations connected to the crime, then using that warrant someone can get the physical key to access the cameras video, I think this system can help with crime and make the abuse harder, when I am thinking at abuse I am thinking at police or other employees checking on who they want, find all their movements, find who they talked to and politicians can abuse it to find dirt and blackmail their opponents, journalists and critics.
This is just another area where Europe is lagging behind the rest of the world (ie. the USA) and wants to slow everyone else down so its native conglomerates can catch up. Same thing with the recent regulation on autonomous vehicles.
“We can already be tracked by X” doesn’t mean that we should stop caring about the other areas in which abuse can happen. It’s complacency, and it allows for the situation to become worse to the point of no return. We’ve seen so many examples of that in the past decade.
I‘m happy that the EU is considering taking more time to implement things properly (or at least attempting to do so).