National police forces of 10 EU member states are calling for a legal framework to create a massive system of interlinked facial recognition databases “as quickly as possible,” a report leaked to the Intercept on Friday reveals. Austria is leading the way on the project, which was still in its early phases as of November, when the report initially circulated among EU officials.
Produced as part of a project to expand Prüm, the EU-wide database-cross-referencing system that already allows for all-at-once scanning of individual DNA, fingerprint, and vehicle registration databases, the report calls for EU legislation that would create and connect country-level facial recognition databases, potentially all the way to the US. Because the US already has a Prüm-like exchange in place with countries that are part of the Visa Waiver Program, including most EU member states, some – including the alarmed EU official who allegedly leaked the report to the Intercept – believe any future facial recognition database network would include the US by default.
Brussels is pouring significant resources into plotting out this layer of the surveillance state, involving both private and public sector. Consulting firm Deloitte was paid €700,000 last year to deliver a report on upgrades to Prüm, focusing in part on facial recognition, while a €500,000 initiative bankrolled by the European Commission engaged a group of public agencies to “map the current situation of facial recognition in criminal investigations in all EU member states” with the goal of moving “towards the possible exchange of facial data.”
In April 2019, legislation merged five EU databases holding fingerprints, facial scans, and other biometric data to create a single repository of information on 300 million non-EU citizens. While Deloitte recommended the EU do the same with police facial recognition databases in its November report, law enforcement officials apparently balked. However, linking the various countries’ facial scan databases with a Prüm-like cross-check system would ultimately have the same privacy repercussions as merging them.
Meanwhile, the US is expanding and consolidating its own biometric databases, paralleling the EU’s streamlining of Prüm. Last June, DHS added DNA profiles and “relationship patterns” gleaned from social media to its upgraded Homeland Advanced Recognition Technology (HART) System, bringing the existing database – which already includes fingerprints, iris scans, and facial recognition – onto the Amazon cloud, where most other US government agencies already store their data.