UK biometrics watchdogs warn police AI oversight is years behind rollout

TL;DR:

• Britain’s biometrics commissioners for England and Wales (William Webster) and Scotland (Brian Plastow) say live facial recognition is being deployed faster than the law that governs it can be written.
• The Metropolitan Police has scanned more than 1.7 million faces in London so far in 2026, up 87% on the same period in 2025; an Information Commissioner’s Office audit of the Met has been postponed indefinitely.
• The Home Office has committed £115m to a new Police.AI centre to standardise rollout across all 43 forces in England and Wales — but legal scholars say the broader regulatory framework is at least three years away.

The biometrics commissioners’ joint warning lands as the Home Office signals it intends to consult on legislation that would let “all police forces use this new technology with greater confidence and more often”. Webster told the Guardian that legislation was at least three years away while live facial recognition was already operating in a dozen forces. Plastow described police use in England and Wales as forces “really just marking their own homework”.

Context: a fragmented framework

Each of the 43 forces in England and Wales currently sets its own AI procurement policy, leading to wide variation in how the technology is deployed. Retrospective facial recognition (RFR) — comparing a custody mugshot database against CCTV, doorbell and dashcam footage — runs at more than 25,000 searches per month, according to the New Statesman, which interviewed the same biometrics commissioner alongside ex-Met detective Mike Neville. Researchers at Queen Mary University of London found that across six Met live facial recognition trials, only eight of 42 matches were correct — an 81% error rate.

Specific cases have hardened the criticism. Alvi Choudhury, a 26-year-old Southampton resident, was arrested at home for a Milton Keynes burglary after Thames Valley Police’s software confused him with another person of South Asian heritage; he says he had never visited the city. Whistleblower Paul Fyfe, a former security guard who used the Facewatch retail system, alleged that some staff added customers to watchlists “maliciously” — a claim Facewatch’s CEO disputes.

Beyond the policing context, an ICO audit of the Met’s facial recognition use, originally scheduled for October 2025, has been postponed and is no longer certain to proceed. Civil liberties campaigner David Davis MP called the ICO “insufficiently aggressive”. Polling for biometric firm Face Int found 57% of Britons view live facial recognition as “another step towards turning the UK into a surveillance society”; 62% worry about misidentification.

Looking forward

The Crime and Policing Bill is expected to include some governance for facial recognition, though Webster fears the meaningful biometric oversight provisions will be “watered down” as parliamentary attention focuses on the abolition of police and crime commissioners and force consolidation. With the £115m Police.AI centre intended to set national standards, the open question is whether procurement reform can substitute for primary legislation. For UK technology decision-makers — particularly retailers running Facewatch-style systems and SaaS vendors selling into police forces — the trajectory is clear: rapid commercial expansion with statutory guardrails arriving years after deployment.