Private security and surveillance

Security firms, surveillance operators and retailers use AI to recognize faces, detect behavior and control access. It is the most restricted use: the EU bans several biometric practices, Peru treats them as misuse, and in the US laws such as Illinois BIPA require written consent and generate large lawsuits.

Relevant sector rules

EU: since Feb 2, 2025, untargeted scraping of facial images, biometric categorization by sensitive traits and emotion recognition at work and in education are banned; remote biometric identification is high-risk from Dec 2, 2027, and people exposed to emotion recognition or categorization must be informed (Art. 50(3)). Spain: the AEPD treats biometric data as a special category and is very restrictive about facial recognition in stores. Peru: mass surveillance without legal basis, inference of sensitive data and real-time remote biometric identification in public spaces are misuse. Ecuador: the data protection law requires an impact assessment for large-scale biometric processing and systematic video surveillance. Colombia, Mexico, Chile, Argentina and Brazil: biometric data is sensitive and needs consent or a heightened legal basis. US: the FTC's Rite Aid order sets the testing and oversight standard for facial recognition; Illinois (BIPA) and Texas (CUBI) require consent; Colorado extended its privacy law to biometric data from Jul 1, 2025; New York City requires signage in businesses that collect biometrics.

Typical AI uses

Sector regulators

Spain: Ministry of the Interior, private security
Spanish Data Protection Agency (AEPD)
Ecuador: Superintendency of Personal Data Protection (SPDP)
Colombia: Superintendency of Surveillance and Private Security
Superintendency of Industry and Commerce (SIC)
Peru: National Superintendency for Security Services, Arms and Explosives Control (SUCAMEC)
Mexico: Ministry of Security and Citizen Protection (SSPC)
Argentina: Ministry of National Security
Brazil: Federal Police, private security
National Data Protection Authority (ANPD)
United States (federal): Federal Trade Commission (FTC)
Texas: Texas Attorney General