FBI and ICE have access to 641M photos including driver's license photos from 21 states for facial recognition searches, internal docs and GAO report show
A cache of records shared with The Washington Post reveals that agents are scanning millions of Americans' faces without their knowledge or consent.
Context & Ripple Effects
The Washington Post's cache is the third act in a story GAO has been telling since 2016, when it flagged privacy and accuracy problems in an FBI facial recognition database then holding 411 million photos. By 2017, reporting showed the system already covered roughly half of US adults without consent and was more likely to misidentify Black people. What changed in 2019 is the supply chain: rather than collecting faces itself, the FBI now draws on driver's license photos from 21 states, with ICE searching the same pools.
That matters because the pipeline runs through state DMVs, not federal booking — meaning residents who never interacted with law enforcement are in the search set. The Post's later reporting on ICE running face searches against millions of Maryland drivers' photos without court approval shows where this leads, and GAO's 2021 finding that 20 of 42 surveyed federal agencies use the tech confirms the integration has only widened.
First-order effects
- State DMV photo databases in 21 states now function as biometric lookup services for FBI and ICE agents, putting every licensed driver in those states inside the searchable population regardless of any suspicion or consent.
- ICE gains a work-around to immigration-court process: identity checks run against license photos before any judge reviews a request.
Second-order effects
- States face pressure to decide whether DMV records exist for licensing or for federal immigration and criminal enforcement — a choice activists have already forced onto the Maryland case, threatening the interstate data-sharing arrangements the FBI relies on.
- Accuracy findings from earlier GAO review compound operationally: misidentification risk falls hardest on Black residents, creating wrongful-suspect exposure for local police who act on federal match results.
Third-order effects
- The pattern — agencies building capability first, oversight after — suggests US biometric surveillance is being assembled through routine interagency data-sharing instead of legislative debate, leaving GAO audits as the primary accountability mechanism.
- If DMV-to-federal sharing becomes normalized, other state-held identity repositories (tax, benefits, professional licensing) become candidate feeds, expanding the searchable population well past the current 641 million.
The trend: Federal agencies are assembling a de facto national face-search capability by tapping state civilian databases faster than legislatures or courts can set rules for it.