Independent research study — not client work

Verified

RS-02Privacy and policing • checked 4 September 2026

Facial recognition in public space: one ruling, one prohibition, one settlement

Three documents underpin this page: the court's own press summary of R (Bridges) v Chief Constable of South Wales Police, the Official Journal text of the AI Act, and the plaintiffs' counsel's announcement of the Detroit settlement. The study deliberately does not attempt a global map of deployments.

Section 01

The question and the answer

Question

Where has live facial recognition in public space been held unlawful by a court, what does EU law now prohibit, and what controls did a US city accept after a wrongful-arrest lawsuit?

Answer as published

On 11 August 2020 the Court of Appeal of England and Wales held South Wales Police's use of live automated facial recognition unlawful on three of five grounds — Article 8 'in accordance with the law', an inadequate data protection impact assessment, and the public sector equality duty. Separately, Article 5(1)(h) of Regulation (EU) 2024/1689 prohibits real-time remote biometric identification in publicly accessible spaces for law enforcement, save for three narrow listed objectives. In the United States, Detroit settled the first facial-recognition wrongful-arrest lawsuit on 28 June 2024 with enforceable policy controls rather than a ban.

Section 02

Scope

What this study covers, stated before the findings so the limits are not read as an afterthought.
  • Three instruments only: one appellate judgment for England and Wales, one EU regulation, and one US city settlement.
  • The judgment concerned an overt trial deployment, not covert surveillance — the court said so expressly.
  • The Detroit record comes from the plaintiffs' counsel's press release, read in full; the settlement agreement PDF itself was not read, so the Detroit finding is marked partially verified.
  • No claim is made about current deployment levels in any country.

Section 03

Method as actually run

  1. 01

    Read the court's press summary and the judgment header rather than news reports of the outcome.

  2. 02

    Record which grounds succeeded and which failed, because reporting frequently collapses the two.

  3. 03

    Read the prohibition text in the Official Journal, including its exceptions, before summarising it.

Section 04

Findings, each mapped to a source

F1Verified

The Court of Appeal allowed the appeal on grounds 1, 3 and 5, and dismissed it on grounds 2 and 4.

Ground 1 succeeded: the legal framework left too broad a discretion over where AFR Locate could be used and who could be placed on a watchlist, so the interference with Article 8 rights was not 'in accordance with the law'. Ground 3 succeeded: the data protection impact assessment was deficient because it was written on the basis that Article 8 was not infringed. Ground 5 succeeded: the force had not taken reasonable steps to enquire whether the software was biased on race or sex grounds, breaching the public sector equality duty.

F2Verified

The court did not find that the software was in fact biased.

The press summary records expressly that there was no clear evidence that AFR Locate was in fact biased on grounds of race or sex; the breach was the failure to enquire. The proportionality challenge (ground 2) also failed.

F3Verified

The scale of the trial is documented in the judgment record, not estimated here.

South Wales Police deployed AFR Locate on about 50 occasions between May 2017 and April 2019; watchlists comprised between 400 and 800 people; and it is estimated that around 500,000 faces may have been scanned across the 2017 and 2018 deployments.

F4Verified

EU law now prohibits real-time remote biometric identification in publicly accessible spaces for law enforcement, with three listed exceptions.

Article 5(1)(h) permits such use only where strictly necessary for: the targeted search for specific victims of abduction, trafficking or sexual exploitation and the search for missing persons; the prevention of a specific, substantial and imminent threat to life or physical safety, or a genuine and present or foreseeable threat of a terrorist attack; or the localisation or identification of a suspect for offences listed in Annex II punishable by at least four years' custody.

F5Partially verified

Detroit settled a facial-recognition wrongful-arrest lawsuit on 28 June 2024 with enforceable policy controls.

Robert Williams was wrongfully arrested at his home in 2020 after Detroit police relied on an incorrect facial-recognition result; according to the ACLU's announcement, his was one of three known wrongful arrests in Detroit involving the technology, and all three of those arrested were Black. The settlement bars arrest based solely on facial-recognition results, bars conducting a lineup based solely on a facial-recognition lead without independent and reliable evidence, requires officer training on the technology's risks, requires an audit of all cases since 2017 in which facial recognition was used to obtain an arrest warrant, and leaves the court retaining jurisdiction to enforce the agreement for four years. Detroit also agreed to pay damages to Mr Williams.

Section 05

Sources opened

Every source below was reached at the date shown. Where a page could not be fetched directly, that is stated.
S1Verified

R (Bridges) v Chief Constable of South Wales Police [2020] EWCA Civ 1058 — judgment and press summary

Courts and Tribunals Judiciary (England and Wales)11 August 2020

Judgment PDF confirmed reachable; the ground-by-ground outcome was read from the court's own press summary issued the same day.

Open source
S2Verified

Regulation (EU) 2024/1689, Article 5(1)(h)

European Union — EUR-LexAdopted 13 June 2024

Prohibition and its three exceptions read directly in the Official Journal HTML text.

Open source
S3Partially verified

Civil Rights Advocates Achieve the Nation's Strongest Police Department Policy on Facial Recognition Technology (Williams v. City of Detroit settlement announcement)

American Civil Liberties Union / ACLU of Michigan28 June 2024

Press release fetched and read in full. It is the plaintiffs' counsel's own announcement, so it is one-sided by nature: the settlement agreement PDF (Williams v. City of Detroit, Case No. 21-10827, E.D. Mich.) was identified but not read, which is why finding F5 is marked partially verified.

Open source

Section 06

Search log

QueryEngineLoggedOutcome
Bridges v South Wales Police Court of Appeal 2020 EWCA Civ 1058 judgmentWeb search4 September 2026Located the judiciary.uk judgment PDF and the official press summary.
Bridges press summary appeal succeeded grounds data protection impact assessmentWeb search4 September 2026Returned the full press summary text, which set the ground-by-ground record used in findings F1 and F2.
AI Act Article 5 real-time remote biometric identification publicly accessible spacesDirect fetch4 September 2026Prohibition text and its three exceptions located in the Official Journal HTML.
Detroit facial recognition wrongful arrest settlement Williams v. City of DetroitWeb search, then direct fetch (aclu.org)4 September 2026A guessed ACLU URL returned 404; a fresh search located the settlement announcement dated 28 June 2024, which was fetched and read in full. The settlement agreement PDF was identified but not read, capping finding F5 at partially verified.

Section 07

What this study does not establish

Stated plainly, because a short study answering a narrow question is only useful if its boundary is visible.
  • Which police forces currently operate live facial recognition, in the UK, the US or anywhere else.
  • Whether South Wales Police's later deployments cured the defects the court identified.
  • How the EU prohibition has been applied by any national authority since it entered into force.
  • Whether Detroit has complied with the settlement terms since June 2024 — the audit it requires was not examined.
  • Any accuracy or error-rate figure for any specific system — none was verified here.