人臉辨識科技的立法趨勢與國際實踐

Legislative Trends and International Practices in Facial Recognition Technology

人臉辨識科技是使用演算法將臉部資料與資料庫中的臉部資料分析比對且驗證身分的科技。近年來，因其便利性之故，該科技已被高度使用於不同社會領域。為減少人臉辨識科技因誤用或濫用而有侵害基本權的疑慮，區域組織或各國政府以制定新法或是修改個人資料保護法等方式，回應人臉辨識科技的管制需求。例如，2021年4月，歐盟執委會公布《歐盟人工智慧法草案》管制人工智慧與人臉辨識技術的使用。2024年5月，在歐洲議會與歐盟執委會相繼投票通過後，該草案正式成為《歐盟人工智慧法》。此外，美國各州也制定與人臉辨識科技相關的法案。亞洲國家如日本、南韓、新加坡等國則修改個人資料保護法規強化臉部資料的保護。
在此背景下，本文以歐盟、美國與亞洲為例，探討全球人臉辨識立法的規範歷程與特色，同時，也分析人臉辨識科技的立法模式、管制特色與立法的驅力因素。本文發現，在人臉辨識立法的模式上，有2種主要模式。第一種模式是制定新法，如制定單一專法和框架立法，如歐盟與美國。第二種模式是修改個人資料保護法規，如亞洲各國。在管制特色上，人臉辨識立法之間的共同特色是強化透明性與問責制度。此外，國際人權機制和人臉辨識相關的司法訴訟，在這波全球人臉辨識的規範形成過程中，扮演與發揮督促立法與規範引領的角色與功能。

Facial recognition technology uses algorithms to analyze and compare personal facial images with those in a database to authenticate individual identity. Recently, due to its efficiency, this technology has become increasingly popular in various social fields. To prevent violations of fundamental human rights from the misuse or abuse of facial recognition technology, some regional organizations and countries have either enacted (proposed) new laws or revised their data protection and privacy laws to regulate the use of facial recognition technology. For example, to regulate the use of artificial intelligence and face recognition technology, the European Commission proposed the “Rules for the Unification of Artificial Intelligence Rules of the European Parliament and Council and the Amendment of Several Union Legislations” (called as Artificial Intelligence Act) in April 2021. In May 2024, after votes of approval from both the European Parliament and the European Commission, the draft officially became law. Additionally, several law proposals regarding facial recognition technology have been deliberated by the federal legislators of the US. Meanwhile, some US states such as California, Massachusetts, or Washington have enacted legislation concerning face recognition technology. Meanwhile, several Asian countries, including Japan, South Korea, and Singapore, have revised their data protection laws to enhance the protection of facial data.
Considering this context, this article analyzes the current legislative models of face recognition technology laws, the characteristics of major regulatory measures, and the driving forces influencing the trend of facial recognition technology regulations. This article identifies two major legislative models for face recognition technology. The first model consists of enacting new laws, such as enacting specific and framework laws. The second model is to revise laws regarding the protection of personal data or privacy laws. In terms of the characteristics of regulatory measures, face recognition technology legislation is characterized by strengthening transparency and accountability mechanisms. Additionally, international human rights mechanisms and judicial decisions concerning facial recognition technology have guided and facilitated the current global wave of face recognition legislation.