digitallawJournal of Digital Technologies and LawJournal of Digital Technologies and Law2949-2483Kazan Innovative University named after V. G. Timiryasov10.21202/jdtl.2023.36drgddjdigitallaw-247Research ArticleARTICLESСТАТЬИFacial Recognition Technology and Ensuring Security of Biometric Data: Comparative Analysis of Legal Regulation ModelsТехнология распознавания лиц и обеспечение безопасности биометрических данных: компаративный анализ моделей правового регулированияhttps://orcid.org/0000-0001-5296-7916УтегенД.UtegenD.

Утеген Дана – заместитель директора, старший преподаватель Высшей школы права

010000, г. Астана, Коргалжинское шоссе, 8

Dana Utegen – Deputy Director, Senior Lecturer of KAZGUU Law School

8 Korgalzhinskoye shosse, 010000 Astana

d_utegen@kazguu.kzhttps://orcid.org/0000-0003-3948-9977РахметовБ. Ж.RakhmetovB. Zh.

Рахметов Бауржан Жанатович – PhD в области политики и международных отношений, ассистент-профессор Международной школы экономики

Web of Science Researcher ID: https://www.webofscience.com/wos/author/record/32537389

Google Scholar ID: https://scholar.google.com/citations?user=hanfRwoAAAAJ

010000, г. Астана, Коргалжинское шоссе, 8

Baurzhan Zh. Rakhmetov – PhD in Politics and International Relations, Assistant Professor of International School of Economics

Web of Science Researcher ID: https://www.webofscience.com/wos/author/record/32537389

Google Scholar ID: https://scholar.google.com/citations?user=hanfRwoAAAAJ

8 Korgalzhinskoye shosse, 010000 Astana

b_rakhmetov@kazguu.kzУниверситет КАЗГЮУ имени М. С. НарикбаеваКазахстанKAZGUU University AstanaKazakhstan20232008202313825844Copyright © Utegen D., Rakhmetov B.Z., 20232023Утеген Д., Рахметов Б.Ж.Utegen D., Rakhmetov B.Z.Данная работа распространяется под лицензией Creative Commons Attribution 4.0.This work is licensed under a Creative Commons Attribution 4.0 License.https://www.lawjournal.digital/jour/article/view/247Objective

Objective: to specify the models of legal regulation in the sphere of biometric identification and authentication with facial recognition technology in order to elaborate recommendations for increasing information security of persons and state-legal protection of their right to privacy.

Methods

Methods: risk-oriented approach in law and specific legal methods of cognition, such as comparative-legal analysis and juridical forecasting, are significant for the studied topic and allow comparing the legal regulation models used in foreign countries and their unions in the sphere of biometric identification and authentication with facial recognition systems, forecasting the possible risks for the security of biometric data, taking into account the prospects of further dissemination of the modern facial recognition technology, and to shape recommendations on legal protection of biometric data.

Results

Results: the ways are proposed to further improve legislation of the Republic of Kazakhstan and other countries currently developing the legal regulation of biometric data, regarding the admissible criteria for using the facial recognition technology, the elaboration of categorization of biometric systems with a high and low risk levels (by the example of the experience of artificial intelligence regulation in the European Union), and the necessity to introduce a system of prohibitions of mass and unselective surveillance of humans with video surveillance systems, etc.

Scientific novelty

Scientific novelty: consists in identifying a positive advanced foreign experience of developing legal regulation in the sphere of facial recognition based on biometry (European Union, the United States of America, the United Kingdom of Great Britain and Northern Ireland), which can be used for further improvement of the national legislation in order to create more effective mechanisms of legal protection of personal data, including biometric information.

Practical significance

Practical significance: based on risk-oriented approach and comparative analysis, the research allows elaborating measures for enhancing the legal protection of biometric data and ensuring effective protection of civil rights and freedoms by forecasting further expansion of the modern facial recognition technology.

Цель

Цель: выявление моделей правового регулирования в сфере биометрической идентификации и аутентификации технологией распознавания физических лиц для выработки рекомендаций по повышению информационной безопасности человека и государственно-правовой охраны его права на неприкосновенность частной жизни.

Методы

Методы: рискориентированный подход в праве и такие специально-юридические методы познания, как методы сравнительно-правового анализа и юридического прогнозирования, имеют для исследуемой проблематики определяющее значение и позволяют сопоставить применяемые в зарубежных странах и их объединениях модели правового регулирования в сфере биометрической идентификации и аутентификации системами распознавания физических лиц, спрогнозировать возможные риски для безопасности биометрических данных с учетом перспективы дальнейшего распространения современной технологии распознавания лиц, сформулировать рекомендации по правовой охране биометрических данных.

Результаты

Результаты: предложены пути дальнейшего совершенствования законодательства Республики Казахстан и иных стран, находящихся в процессе развития правового регулирования биометрических данных, в части определения допустимых критериев использования технологии распознавания лиц, разработки категоризации биометрических систем с высоким и низким уровнем риска (по примеру опыта регулирования искусственного интеллекта в Европейском союзе), необходимости введения системы запретов массовой и неизбирательной слежки за человеком с помощью систем видеонаблюдения и др.

Научная новизна

Научная новизна: заключается в выявлении положительного зарубежного передового опыта по развитию правового регулирования в сфере распознавания физических лиц на основе биометрии (Европейский союз, Соединенные Штаты Америки, Соединенное Королевство Великобритании, Северная Ирландия), который может быть использован для дальнейшего совершенствования национального законодательства в целях создания наиболее эффективных механизмов правовой защиты персональных данных, включая биометрическую информацию.

Практическая значимость

Практическая значимость: основанное на рискориентированном подходе и компаративистском анализе исследование позволяет выработать меры по усилению правовой охраны биометрических данных, обеспечению эффективной защиты гражданских прав и свобод на неприкосновенность частной жизни на основе прогноза дальнейшего распространения современной технологии распознавания лиц.

Безопасностьбиометрическая аутентификациябиометрические данныеидентификациянеприкосновенность частной жизниперсональные данныеправоправовое регулированиетехнологии распознавания лиццифровые технологииBiometric authenticationbiometric datadigital technologiesfacial recognitiontechnologiesidentificationlawlegal regulationpersonal dataprivacysecurityReferencesБегишев, И. Р., Хисамова, З. И. (2018). Криминологические риски применения искусственного интеллекта. Всероссийский криминологический журнал, 12(6), 767–775. https://doi.org/10.17150/2500-4255.2018.12(6).767-775Begishev, I. R., & Khisamova, Z. I. (2018). Criminological risks of using artificial intelligence. Russian Journal of Criminology, 12(6), 767–775. (In Russ.). https://doi.org/10.17150/2500-4255.2018.12(6).767-775Кутейников, Д. Л., Ижаев, О. А., Зенин, С. С. (2022). Неприкосновенность частной жизни в условиях использования систем искусственного интеллекта для удаленной биометрической идентификации личности. Lex Russica, 75(2), 121–131. https://doi.org/10.17803/1729-5920.2022.183.2.121-131Bowyer, K. W. (2004). Face recognition technology: security versus privacy. IEEE Technology and Society Magazine, 23(1), 9–19. https://doi.org/10.1109/mtas.2004.1273467Bowyer, K. W. (2004). Face recognition technology: security versus privacy. IEEE Technology and Society Magazine, 23(1), 9–19. https://doi.org/10.1109/mtas.2004.1273467Buresh, D. L. (2021). Should Personal Information and Biometric Data Be Protected under a Comprehensive Federal Privacy Statute that Uses the California Consumer Privacy Act and the Illinois Biometric Information Privacy Act as Model Laws? Santa Clara High Technology Law Journal, 38(1). https://digitalcommons.law. scu.edu/chtlj/vol38/iss1/2Buresh, D. L. (2021). Should Personal Information and Biometric Data Be Protected under a Comprehensive Federal Privacy Statute that Uses the California Consumer Privacy Act and the Illinois Biometric Information Privacy Act as Model Laws?. Santa Clara High Technology Law Journal, 38(1). https://digitalcommons.law.scu.edu/chtlj/vol38/iss1/2Chen, W., & Wang, M. (2023). Regulating the use of facial recognition technology across borders: A comparative case analysis of the European Union, the United States, and China. Telecommunications Policy, 47(2), 102482. https://doi.org/10.1016/j.telpol.2022.102482Chen, W., & Wang, M. (2023). Regulating the use of facial recognition technology across borders: A comparative case analysis of the European Union, the United States, and China. Telecommunications Policy, 47(2), 102482. https://doi.org/10.1016/j.telpol.2022.102482Firc, A., Malinka, K., & Hanáček, P. (2023). Deepfakes as a threat to a speaker and facial recognition: An overview of tools and attack vectors. Heliyon, 9(4), e15090. https://doi.org/10.1016/j.heliyon.2023.e15090Firc, A., Malinka, K., & Hanáček, P. (2023). Deepfakes as a threat to a speaker and facial recognition: An overview of tools and attack vectors. Heliyon, 9(4), e15090. https://doi.org/10.1016/j.heliyon.2023.e15090Gates, K. A. (2002). Wanted Dead or Digitized: Facial Recognition Technology and Privacy. Television & New Media, 3(2), 235–238. https://doi.org/10.1177/152747640200300217Gates, K. A. (2002). Wanted Dead or Digitized: Facial Recognition Technology and Privacy. Television & New Media, 3(2), 235–238. https://doi.org/10.1177/152747640200300217Gill, P. (1997). Technostalgia: Making the future past perfect. Camera Obscura: Feminism, Culture, and Media Studies, 14(1–2), 161–179. https://doi.org/10.1215/02705346-14-1-2_40-41-161Gill, P. (1997). Technostalgia: Making the future past perfect. Camera Obscura: Feminism, Culture, and Media Studies, 14(1–2), 161–179. https://doi.org/10.1215/02705346-14-1-2_40-41-161Givens, G., Beveridge, J. R., Draper, B. A., Grother, P., & Phillips, P. J. (2004). How features of the human face affect recognition: a statistical comparison of three face recognition algorithms. In Proceedings of the 2004 IEEE Computer Society Conference on Computer Vision and Pattern Recognition, 2004. https://doi. org/10.1109/cvpr.2004.1315189Givens, G., Beveridge, J. R., Draper, B. A., Grother, P., & Phillips, P. J. (2004). How features of the human face affect recognition: a statistical comparison of three face recognition algorithms. In Proceedings of the 2004 IEEE Computer Society Conference on Computer Vision and Pattern Recognition, 2004. https://doi.org/10.1109/cvpr.2004.1315189Hill, D., O’Connor, C. D., & Slane, A. (2022). Police use of facial recognition technology: The potential for engaging the public through co-constructed policy-making. International Journal of Police Science & Management, 24(3), 325–335. https://doi.org/10.1177/14613557221089558Hill, D., O’Connor, C. D., & Slane, A. (2022). Police use of facial recognition technology: The potential for engaging the public through co-constructed policy-making. International Journal of Police Science & Management, 24(3), 325–335. https://doi.org/10.1177/14613557221089558Johnson, Th. L., Johnson, N. N., McCurdy, D., & Olajide, M. M. (2022). Facial recognition systems in policing and racial disparities in arrests. Government Information Quarterly, 39(4), 101753. https://doi.org/10.1016/j. giq.2022.101753Johnson, Th. L., Johnson, N. N., McCurdy, D., & Olajide, M. M. (2022). Facial recognition systems in policing and racial disparities in arrests. Government Information Quarterly, 39(4), 101753. https://doi.org/10.1016/j.giq.2022.101753Jones, C. (2021). Law Enforcement Use of Facial Recognition: Bias, Disparate Impacts to People of Color, and the Need for Federal Legislation. NCJL & Tech., 22(4), 777. https://scholarship.law.unc.edu/ncjolt/vol22/iss4/6Jones, C. (2021). Law Enforcement Use of Facial Recognition: Bias, Disparate Impacts to People of Color, and the Need for Federal Legislation. NCJL & Tech., 22(4), 777. https://scholarship.law.unc.edu/ncjolt/vol22/iss4/6Kuteynikov, D. L., Izhaev, O. A., Lebedev, V. A., & Zenin, S. S. (2022). Privacy in the realm of Artificial Intelligence Systems Application for Remote Biometric Identification. Lex Russica, 75(2), 121–131. (In Russ.). https://doi.org/10.17803/1729-5920.2022.183.2.121-131Nissenbaum, H. (2004). Privacy as Contextual Integrity. Washington Law Review, 79, 119. https://digitalcommons.law.uw.edu/wlr/vol79/iss1/10Nissenbaum, H. (2004). Privacy as Contextual Integrity. Washington Law Review, 79, 119. https://digitalcommons. law.uw.edu/wlr/vol79/iss1/10Raissova, G., & Mukhamejanova, D. (2021). Nondiscrimination Policy and Privacy Protection in Case of Genetic Passport for Soldiers. South Asian Journal of Social Sciences and Humanities, 2(3), 140–150. https://doi.org/10.48165/sajssh.2021.2309Raissova, G., & Mukhamejanova, D. (2021). Nondiscrimination Policy and Privacy Protection in Case of Genetic Passport for Soldiers. South Asian Journal of Social Sciences and Humanities, 2(3), 140–150. https://doi. org/10.48165/sajssh.2021.2309Sarabdeen, J. (2022, March 11). Protection of the rights of the individual when using facial recognition technology. Heliyon, 8(3), e09086. https://doi.org/10.1016/j.heliyon.2022.e09086Sarabdeen, J. (2022, March 11). Protection of the rights of the individual when using facial recognition technology. Heliyon, 8(3), e09086. https://doi.org/10.1016/j.heliyon.2022.e09086Schweber, H. (2014). Lochner v. New York and the Challenge of Legal Historiography. Law & Social Inquiry, 39(1), 242–274. https://doi.org/10.1111/lsi.12062Schweber, H. (2014). Lochner v. New York and the Challenge of Legal Historiography. Law & Social Inquiry, 39(1), 242–274. https://doi.org/10.1111/lsi.12062Shore, A. (2022). Talking about facial recognition technology: How framing and context influence privacy concerns and support for prohibitive policy. Telematics and Informatics, 70, 101815. https://doi.org/10.1016/j.tele.2022.101815Shore, A. (2022). Talking about facial recognition technology: How framing and context influence privacy concerns and support for prohibitive policy. Telematics and Informatics, 70, 101815. https://doi.org/10.1016/j. tele.2022.101815Sprokkereef, A. (2007, August). Data Protection and the Use of Biometric Data in the EU. In The Future of Identity in the Information Society (pp. 277–284). Boston, MA: Springer. https://doi.org/10.1007/978-0-387-79026-8_19Sprokkereef, A. (2007, August). Data Protection and the Use of Biometric Data in the EU. In The Future of Identity in the Information Society (pp. 277–284). Boston, MA: Springer. https://doi.org/10.1007/978- 0-387-79026-8_19Stepney, Ch. (2019). Actual Harm Means it is too Late: How Rosenbach v. Six Flags Demonstrates Effective Biometric Information Privacy Law. Loyola of Los Angeles Entertainment Law Review, 40(1). https://digitalcommons.lmu.edu/elr/vol40/iss1/2Stepney, Ch. (2019). Actual Harm Means it is too Late: How Rosenbach v. Six Flags Demonstrates Effective Biometric Information Privacy Law. Loyola of Los Angeles Entertainment Law Review, 40(1). https:// digitalcommons.lmu.edu/elr/vol40/iss1/2Zuo, K. J., Saun, T. J., & Forrest, C. R. (2019). Facial Recognition Technology: A Primer for Plastic Surgeons. Plastic and Reconstructive Surgery, 143(6), 1298e–1306e. https://doi.org/10.1097/prs.0000000000005673Zuo, K. J., Saun, T. J., & Forrest, C. R. (2019). Facial Recognition Technology: A Primer for Plastic Surgeons. Plastic and Reconstructive Surgery, 143(6), 1298e–1306e. https://doi.org/10.1097/prs.0000000000005673

The authors declare that there are no conflicts of interest present.