UK ICO audits reveal need for improved police facial recognition oversight

The UK Information Commissioner’s Office (ICO) has released an outcomes report following audits of five police forces in England and Wales, including West Yorkshire Police and Greater Manchester Police. The regulator described the findings as a ‘mixed picture,’ noting that while forces generally have a documented lawful basis for processing data, significant improvements are required in several areas.

The audits highlighted a need for ‘urgent attention’ regarding senior oversight, accountability, and staff training. The ICO emphasized that forces must maintain clear records of personal information usage and take proactive steps to mitigate risks of bias and inaccuracy. The regulator issued 107 recommendations covering compliance and best practices, all of which were accepted or partially accepted by the audited forces.

Findings indicated that compliance rates were generally higher for live facial recognition than for retrospective or forensic applications. In response to demographic differentials identified in legacy algorithms, the Home Office and the National Police Chiefs’ Council (NPCC) are implementing additional training, oversight reporting, and plans to replace older algorithms. The ICO has also called for greater specificity in guidance for law enforcement to help maintain public trust as facial recognition and AI tools are rolled out more widely across the UK.