Live data from Hacker News

Facial recognition: School ID checks lead to GDPR fine

bbc.com

171–180 of 182 posts

Re: Facial recognition: School ID checks lead to GDPR fine

#171
post #16

Earlier quoted context omitted.

Do you have any evidence that all parties provided informed consent? i.e. The consent form detailed out what could happen in the (somewhat likely) event the data is breached and how the data may be used? What other parties have access to the information and how that information is stored? How the information is transmitted? And they understood it all, with the attached implications? Considering the only words the per…

This is going over the top. It was just about using facial recognition in a school, not about having brain implants in children... Schools already have pictures and detailed personal details of all pupils. This new technology can have real benefits. For example it could be used to locate a pupil that does not show up in class when they should, or to trigger an alert if a pupil leaves school when not expected to or wh…

Are you arguing that informed consent is over the top and restrictive?

That's... Bold.

Re: Facial recognition: School ID checks lead to GDPR fine

#172

Earlier quoted context omitted.

Hmm, when can parents consent on behalf of children? Can children retract the consent given for them by their parents?

This is a big issue these days. Parents should be able to consent on behalf of their children and retraction should come from parents as well. This used to be considered common sense but not anymore.

This is not a perfect answer either. There are many situations where a parent is at odds with their children as to what is appropriate. In some cases, the parents should "win", but in some cases, the child should "win".

Re: Facial recognition: School ID checks lead to GDPR fine

#173
post #167

Earlier quoted context omitted.

In order to make a positive ID of a student, you need to have a biometric photo of them, or a set of unique indicators that your recognition system will be able to compare against. This facial fingerprint will need to be pretty strongly unique so as to avoid false positives or false negatives. If that information is stolen, the thief has the fingerprint for your face, which is very difficult for you to change. The le…

I couldn't find online if Anderstorp High has Student IDs, but assuming that they do, the school already has a photograph of every student.

Student ID photos and biometric photos aren't necessarily the same, and a software system that tracks with certainty where each student is anywhere in the building has implications, as I mentioned just briefly above.

Re: Facial recognition: School ID checks lead to GDPR fine

#174

Earlier quoted context omitted.

I was referring to the maximum fine. It is 4% of global revenues, or 20M EUR, whichever is greater . So the maximum fine would wipe out any business that doesn’t happen to have 20M EUR lying around - that might be 1000% of what they have, but the damage to a large business is capped at 4% of their revenue regardless of how egregious the behavior. That kind of a fine structure has only one possible purpose: it was spe…

Normal fines are “up to x million” The GDPR fine is specially done some large multinationals can’t ignore it.

[deleted]

Re: Facial recognition: School ID checks lead to GDPR fine

#175
post #19

What is the personal data being unnecessarily collected here? Reference pictures for facial recognition? Cause attendance would be collected regardless...

The biometrics of the face. Linked article states: "The General Data Protection Regulation, which came into force last year, classes facial images and other biometric information as being a special category of data, with added restrictions on its use."

But the school probably already has pictures of the students for ID/yearbook....

Re: Facial recognition: School ID checks lead to GDPR fine

#176
post #172

Earlier quoted context omitted.

This is a big issue these days. Parents should be able to consent on behalf of their children and retraction should come from parents as well. This used to be considered common sense but not anymore.

This is not a perfect answer either. There are many situations where a parent is at odds with their children as to what is appropriate. In some cases, the parents should "win", but in some cases, the child should "win".

Obviously a child is not able to decide what is appropriate on this issue. This isn't about choosing an ice cream flavour.

Re: Facial recognition: School ID checks lead to GDPR fine

#177

Earlier quoted context omitted.

This is going over the top. It was just about using facial recognition in a school, not about having brain implants in children... Schools already have pictures and detailed personal details of all pupils. This new technology can have real benefits. For example it could be used to locate a pupil that does not show up in class when they should, or to trigger an alert if a pupil leaves school when not expected to or wh…

Are you arguing that informed consent is over the top and restrictive? That's... Bold.

Please refrain from misrepresenting others' comments, and I hope there can be a mature discussion instead of this sort of attack.

Re: Facial recognition: School ID checks lead to GDPR fine

#178
post #157

Earlier quoted context omitted.

Facial recognition can raise privacy concerns but it does not necessarily erode privacy. Schools have a duty to provide a safe environment, including keeping track of who's on school premises, where pupils are, and whether pupils are let to leave premises when they are not expected to. Obviously the younger the pupils the stronger those duties. For example, facial recognition could tell the system that you are in the…

well, until the technology is trusted "enough", there should be audit logs - pretty much destroying privacy. Again, with the current technology and literacy level, I'd not trust a school to be able to afford to employ proper security policies. It's already hard for businesses that actually spend substantial effort and resources.

Audit log do not destroy privacy for the exact reason I have explained in my previous comment.

Re: Facial recognition: School ID checks lead to GDPR fine

#179

Earlier quoted context omitted.

>knowing where pupils are at all times is quite a legitimate aim for a school // Does continual surveillance improve educational outcomes such as life-fulfillment and academic achievement? Why is it a legitimate _aim_ for a school?

I'm sure you know that schools have an extensive duty of care over the minors they have on their premises.

There's a difference betwwen "X is in attendance" and "X spent 12.3 s at the water fountain in the company of Z, P, R" though.

Re: Facial recognition: School ID checks lead to GDPR fine

#180
post #172

Earlier quoted context omitted.

This is not a perfect answer either. There are many situations where a parent is at odds with their children as to what is appropriate. In some cases, the parents should "win", but in some cases, the child should "win".

Obviously a child is not able to decide what is appropriate on this issue. This isn't about choosing an ice cream flavour.

There’s little evidence to suggest adults are capable of deciding what is appropriate in this issue either.
Post reply on HN