China releases draft rules for limiting the use of facial recognition to “specific purposes and full necessity”, requiring individual approval, and more
The pervasive use of facial recognition technology across all facets of life in China has elicited both praise for its convenience and backlash around privacy concerns.
Context & Ripple Effects
The proposal builds on earlier consent guidelines for commercial venues and China’s 2021 privacy law, which set reasonable-purpose and minimum-scope expectations for data collection.
It treats biometric identification as a more tightly bounded use case within that privacy framework, a direction later reflected in restrictions on non-consensual use in private spaces.
First-order effects
- If adopted, organizations deploying facial recognition would need to justify each use as both specific and fully necessary, rather than treating the technology as a general-purpose convenience tool.
- Individual approval would become a central condition for covered uses, raising the compliance burden for operators that collect or process facial data.
Second-order effects
- Commercial venues already covered by the earlier consent guidance would face a clearer, more demanding benchmark for reviewing deployments, documentation, and user flows.
- Biometric technology vendors would be pushed to provide purpose controls, consent records, and configurations that let customers limit collection to approved scenarios.
Third-order effects
- The measure points toward biometric data being governed through more explicit use-case boundaries than general personal-data rules, with necessity becoming a practical test for deployment.
- If this approach is carried into final rules and enforcement, facial-recognition providers may compete increasingly on compliance capabilities as well as recognition performance.
The trend: China is progressively translating broad personal-data principles into sector-specific limits on high-sensitivity AI and biometric uses.