人臉辨識技術應用之規範探討——以美國為例

Regulations for the Use of Facial Recognition in United States

隨著人工智慧的發展，人臉辨識技術作為商業層面之應用已越趨廣泛，亦同時帶來諸多法律爭議，例如資安、隱私、個人資料保護、消費者保護、公平交易等。美國聯邦政府對於人臉辨識的技術應用似乎未有一致性的規範，但從聯邦貿易委員會（FTC）之規範準則或是裁罰案件中可詳加瞭解主管機關的管制角度，並且美國各州例如伊利諾州BIPA規範、加州CCPA規範、以及部分州直接立法禁止人臉辨識技術使用之規定等，皆可觀察目前該技術在美國的規範程度以及應用現況。檢視我國目前法規，除了經由個人資料保護法之規範以外，在企業使用人臉辨識技術時，透過消費者保護法等規範從中檢視隱私政策或定型化契約條款約定等，將可對資料被蒐集之人提供部分程度保障。

The use of facial recognition technology has continued to grow and expand. It has become more widely used as a commercial application, but it has also brought some legal issues, such as information security, privacy, personal data protection, consumer protection, fair trade, etc. The U.S. federal government does not seem to have a consistent standard for the application of facial recognition technology. However, it is possible to learn more about the regulatory perspective from the regulatory guidelines issued by Federal Trade Commission (FTC), and other states’ legislation in United States such as BIPA in Illinois or CCPA in California. In Taiwan, data protection laws provide a legal framework on how to obtain, use and store data of people and the consumer protection laws will regulate unfair or deceptive acts of enterprises. For consumer protection, the enterprises are required to review their privacy policies and standard form contracts to ensure that they may meet the requirements set out in regulations while using facial recognition technology. The Taiwan-US comparison in facial recognition laws will contribute the future development.