In the fourth blog of our five part series on surveillance in healthcare, we examine the use of Facial Recognition Technologies (FRT) in the workplace, exploring their potential benefits, associated risks and challenges, and the professional responsibilities involved in deploying them. If you’re catching up on the series, our previous blogs covered safety and privacy, staff awareness of monitoring, and best practice guidance.
FRT has the potential to transform the landscape of workplace surveillance. Once the preserve of science fiction, FRT is increasingly deployed in a range of professional settings, including healthcare, to enhance security, streamline access control, and support operational efficiency. However, the adoption of facial recognition brings with it a host of legal, ethical, and practical challenges that organisations must navigate with care.
What is Facial Recognition Technology?
FRT uses cameras and sophisticated software to identify or verify individuals by analysing their facial features and comparing them to stored biometric templates. In the workplace, FRT can be used for access control (allowing only authorised personnel into restricted areas), security screening, or even identifying persons of interest in public or semi-public spaces. The technology is increasingly being deployed where safeguarding sensitive areas and ensuring the safety of staff and service users are paramount.
Benefits and use cases
The appeal of FRT lies in its potential to automate and strengthen security processes. For example, facial recognition can replace traditional keycards or passwords, reducing the risk of unauthorised access due to lost or shared credentials. In healthcare, this can be particularly valuable for controlling entry to drug storage rooms, operating theatres, or data centres. FRT also has the potential to support time and attendance monitoring, streamline patient check-in, and to facilitate rapid identification in emergency situations.
Legal and ethical considerations
Despite its advantages, the use of facial recognition in the workplace is subject to strict legal and ethical scrutiny. Biometric data, including facial images, is classified as “special category data” under the UK General Data Protection Regulation and the Data Protection Act 2018. This means that healthcare organisations must have a clear lawful basis for processing such data, conduct a Data Protection Impact Assessment, and implement robust safeguards to protect individual rights.
Explicit consent may be required if the processing is not strictly necessary for a public task or legitimate interest, and alternative methods must be offered to those who do not consent.
Transparency is also critical: individuals must be informed when FRT is in use, and privacy notices should clearly explain the purpose, scope, and retention of biometric data. The deployment of FRT must always be necessary, proportionate, and not discriminatory.
Risks and challenges
FRT is not without its pitfalls. Studies have shown that FRT algorithms may perform less accurately for certain demographic groups, raising the risk of discrimination or unfair outcomes. In healthcare, this could mean that staff or patients from minority backgrounds are more likely to be misidentified. Organisations must take proactive steps to mitigate these risks, including rigorous testing, checking that the systems have been trained with diverse data, and conducting ongoing monitoring to reveal any biases.
There are also significant concerns about data security and the potential for misuse. Biometric data, once compromised, cannot be changed like a password. Therefore, organisations must ensure that facial recognition systems are protected by strong technical and organisational measures, and that access to biometric data is strictly limited to authorised personnel.
Comment
FRT offers powerful benefits for workplace security and efficiency, but its deployment must be carefully managed to respect legal requirements and ethical standards. In healthcare, where the stakes are especially high, organisations should approach FRT with caution, ensuring robust justification, transparency, and safeguards at every stage.
Our content explained
Every piece of content we create is correct on the date it’s published but please don’t rely on it as legal advice. If you’d like to speak to us about your own legal requirements, please contact one of our expert lawyers.