China has long been regarded as one of the pioneering countries in deploying facial recognition technology on a large scale. With an extensive network of smart cameras and increasingly accurate AI algorithms, the country has established a dense surveillance system serving the goals of social management, public security, and economic development. However, alongside the convenience and superior monitoring capabilities, this technology has also sparked significant debates over privacy rights and data security. The introduction of a new regulation on facial recognition technology, which will take effect on June 1, 2025, reflects the government’s effort to strike a balance between the benefits of technological advancement and the potential risks it entails.
Beneficial effect: Strengthening public trust and enhancing data governance standards.
First of all, the new regulation brings clear benefits in terms of protecting citizens’ privacy rights. For many years, facial recognition technology in China has developed so rapidly that it has sometimes outpaced the existing legal framework. The installation of cameras in residential areas, public buildings, shopping centers, streets, and even semi-private locations has raised concerns about non-transparent data collection and the lack of explicit individual consent.
Under the new regulation, organizations and businesses are required to justify the legitimate purpose and necessity of using this technology. Citizens are guaranteed the right to choose an alternative method if they do not wish to provide their biometric data—an unprecedented safeguard. The regulation also demands greater transparency in the collection, storage, processing, and sharing of data. These requirements help establish a stricter personal data governance framework, thereby strengthening public trust in privacy protection policies.
In addition, the new rules push the technology sector to upgrade itself to meet higher technical standards, such as data encryption, limited transmission over the Internet, and secure internal storage. This creates opportunities for companies to develop advanced security solutions, enhancing their competitiveness both domestically and globally.
Challenges: Compliance Pressure and Operational Costs.
However, alongside the aforementioned benefits come a range of challenges, especially for businesses and implementing entities. The requirement to provide alternative verification methods, ensure information transparency, encrypt data, and maintain secure internal storage demands significant investment in technological infrastructure and human resources. For small and medium-sized enterprises, this could become a heavy burden, potentially forcing them to suspend or scale back the use of facial recognition technology due to their limited capacity to meet complex security standards.
In addition, organizations that hold large facial data sets (over 100,000 facial templates) must register with the provincial-level regulatory authority. While this provision enhances oversight, it also imposes requirements for internal audit procedures, license updates, and regular reporting. In the event of violations, fines of up to tens of millions of yuan or 5% of annual revenue could pose a substantial financial risk.
Another challenge lies in ensuring consistent nationwide supervision and enforcement. Clear written regulations are essential, but to truly protect privacy rights, authorities must guarantee strict inspections and effective handling of violations. This requires close coordination between the Cyberspace Administration, the Ministry of Public Security, and local governments. In addition, public awareness of personal data rights must be strengthened so that individuals can effectively exercise their right to choose and raise concerns if their privacy is infringed.
In conclusion, it can be seen that China’s new regulation on facial recognition technology is an important step toward building a sustainable AI and surveillance ecosystem that balances the need for public security with the protection of individual privacy. However, these benefits can only be fully realized if technical barriers, costs, and enforcement capacity are addressed in a coordinated and transparent manner. This will be a significant test for China, which aims to become the world’s major AI innovation center by 2030.
