China’s cybersecurity regulators have announced new rules that will prohibit companies from compelling individuals to use facial recognition for identity verification, marking a significant shift in the country’s approach to biometric technology. The regulations, jointly issued by the Cyberspace Administration of China (CAC) and the Ministry of Public Security, will take effect on June 1, 2025.
Under the new rules, businesses must provide alternative verification methods when facial recognition is offered, and clear signage must be displayed wherever the technology is in use. The regulations specifically target non-security applications such as hotel check-ins, residential community access, and shopping mall entry systems.
The CAC emphasized in its statement that “individuals who do not agree to identity verification through facial recognition should be provided with other reasonable and convenient options.” This marks a notable departure from the widespread mandatory implementation of facial recognition technology across China in recent years.
The move comes amid growing global concerns about privacy implications of facial recognition technology, particularly in commercial settings. A 2021 survey in China found that 75 percent of respondents expressed concerns about facial recognition technology, with 87 percent opposing its use in public business environments.
The regulations also prohibit the mandatory installation of image-capturing and personal identification equipment in residential areas, addressing privacy concerns in private spaces. However, the rules do not affect the use of facial recognition by security authorities.
This regulatory shift aligns with broader international trends toward stricter oversight of biometric surveillance. The new framework builds upon previous restrictions, including a 2021 Supreme Court ruling that banned facial recognition for identity verification in public commercial spaces.
Companies will need to ensure strict compliance with data protection requirements, obtaining explicit consent before processing any facial recognition data. The regulations also mandate that businesses implement robust security measures to protect collected biometric information.
Sources: China Daily Asia, Devdiscourse, Voice of Nigeria
—
March 21, 2025 – by Ji-seo Kim
