🟡 Medium | Source: The Register — Security
British Transport Police have deployed live facial recognition cameras on the London Underground, starting at Victoria station, to identify wanted individuals in real time. The rollout marks a significant expansion of biometric surveillance in public transit infrastructure. Privacy advocates warn the technology is being normalised without sufficient public debate or legal oversight.
Security Architect’s Take: Cloud security architects working with transport or smart-city clients should review data residency, retention, and processing agreements for any biometric pipelines — UK GDPR and the ICO’s biometric data guidance impose strict obligations, and system design must include documented lawful basis, bias auditing, and access controls for the facial recognition data store and matching APIs.
Original advisory: Brit rail cops bring live facial recognition to the London Underground