Many communities in Beijing install "face-brushing" equipment, which requires uploading information such as ID card, household registration book, house book, academic qualifications, etc., mostly provided by third-party companies
Owners of the "brush face" community: who will protect "my face"?
In the Yuanwuqu community of Guangwai Street, Xicheng District, at 5 or 6 o'clock in the afternoon, the number of people picking up children and leaving get off work gradually increased. The residents stood in front of the machine and within a second, the identification was successful and the gate opened automatically.
This is the newly installed face recognition system this year. Not only Yuanwuqu, but also the nearby Guang'an Garden, Beijing Railway and Garden have been installed.
The reporter combed and found that more than 20 communities in Xicheng, Dongcheng, Chaoyang, Haidian, Changping, Fengtai, Fangshan and other districts have installed face recognition systems.
In addition, there are still communities promoting the implementation of face recognition systems.
The rapid expansion of facial recognition applications brings convenience and concerns.
Where does the face information exist?
Where will it flow?
Is there a risk of leakage?
Recently, many citizens have expressed concern about the application of this technology in the community.
The reporter visited nearly 10 communities in Beijing to learn about the application of face recognition in the community, and asked where the face information flows.
■ Visit
Multiple communities have installed "face-swiping" device communities: save manpower
The application of face recognition technology has developed rapidly in recent years.
Previously, face recognition has been used in multiple scenarios such as mobile payment and airport security checks. In 2018, Beijing launched a public rental housing facial recognition system, and some public rental housing residents began to "brush their faces" in and out.
This year, due to the prevention and control of the new crown pneumonia epidemic, the use of face recognition in the community has accelerated.
The reporter visited and sorted out and found that more than 20 communities in Xicheng, Dongcheng, Chaoyang, Haidian, Changping, Fengtai, Fangshan and other districts have installed face recognition systems. In addition, there are still communities that continue to promote the implementation of face recognition systems.
At the end of January, Haidian Xiliulitun Community installed a "face recognition" system to prevent and control the risk of epidemic spread.
In April and May, Qingshuiyuan Community in Dongcheng District, Xibianmen Dongli of Xicheng District, and Nanmofang District of Chaoyang District started to advance.
Beginning in July, several communities in Guangwai Street, Xicheng District, began to deploy.
"It was probably May. Face recognition was carried out for the safety of residents during the epidemic. Now there is no access card, only face recognition." Ms. Zhang, a resident of Qingshuiyuan community, told reporters that the residents were holding the house book or the lease contract. To enter a portrait photo on the property, just scan a QR code on WeChat to log in.
"The installation of a face recognition system eliminates the need to verify the entry and exit of community residents, which can greatly reduce the work pressure of the property, community staff, and volunteers." The community neighborhood committee member interviewed said.
Need to upload account book, house book and other information Owner: worry about privacy
The Guang’anyuan community where Wang Yu (pseudonym) lives began to install the face recognition system in July. “At that time, the new outbreak had ended, and the system was suddenly notified to install the face-washing system. The requirements were very cumbersome, and it was necessary to upload ID cards and household registration books. , Room book information, academic information, and photos are all very sensitive information."
Compared with the convenience brought, Wang Yu is more worried about the confidentiality of his information.
Due to the personal privacy involved, she did not enter the information.
But it also caused her troubles. Every time she went home, she would either follow other people closely or ask the security guard to open the door for her.
Wang Yu's doubts are not alone.
In August, the owner of Sakura Garden on Heping Street, Chaoyang District, left a message on the “Leadership Message Board” of People’s Daily, stating that “the community set up a face recognition system without the owner’s consent, and began to forcibly collect the facial information and identity of the residents in the community. Certificate information, mobile phone information."
Some communities’ facial recognition systems are idle.
In the Sakura Garden community on Heping Street, the face recognition system of Dongximen has been disabled.
"Now that the control is not strict, the power is cut off." The security guard on duty in the community told reporters.
In the Science and Technology Ruifu of Fangshan District, the machine began to be installed in May, and the property was notified to collect information in August, but it has not yet been operated.
"Some residents in the community also mentioned the leakage of information, so some people did not submit their personal information at that time. Someone asked when it was activated some time ago, but it was shelved." The owner, Ms. Chen, told reporters.
■ Follow up
Where is "face information" stored?
Lawyer: There are currently no mandatory standards
Although Mr. Chen, who lives in Xinyi Homeland, uses face recognition, he is also worried about the risk of information leakage and privacy violations in this system.
"The person who monitors the background can see the track of a specific person's actions. If it is monitored by the public security, traces will be left, but can a third-party company guarantee the security of the information? Is there supervision in the background of the information, and whether there is any leakage or sale of personal information Risk, these are not guaranteed."
On April 1st, on the "Leadership Message Board" of People's Daily Online, the Beijing 12345 hotline relayed to the Sub-district Office in reply to the questions from the residents of the Nanmofang area about the face recognition system, stating that strengthening the management of community access is the current epidemic prevention and control in residential areas It is urgently needed that the purpose of information is to verify identity and not to store it.
However, at the end of January this year, a report on "face recognition" in Xiliutun Community, Haidian stated that all community residents' entry and exit records, and the face recognition system is available in the background, so that the community can grasp accurate data in real time.
In addition, on November 5, on the "Leadership Message Board" of People's Daily Online, Beijing 12345 responded to questions from residents of Jinchan Nanli Community, saying that the face recognition system installation manufacturer "Shouwang Field (Beijing) Technology Co., Ltd." The LOOKDOOR standardized community public safety service system has been put on record at the Haidian Branch of the Beijing Municipal Public Security Bureau.
After the information is taken, it will be backed up to the relevant processor, but the property owner will not know and will not leak the secrets.
So, what will happen to the input of facial information if you leave the community after entering information?
Ms. Li, who had rented a house in Yishuifangyuan, Chaoyang District, encountered this situation. On the afternoon of October 28, the reporter and her came to the community. Ms. Li stood by the machine and brushed her face, prompting that “opening failed”.
The reporter then called the property in the community where the operator said: "Face recognition in the community is voluntary. Tenants need to bring the contract to handle face recognition when applying for face recognition. If the contract expires, the face recognition information will be gone."
Where will the processed face recognition information exist?
The operator said: "The information of the personnel who came to handle the information is stored in the computer of the comprehensive management office of the street to which the community belongs. If the tenant contract expires or there is a new tenant, the information of the previous tenant will be deleted. If it is deleted, the community will not be able to face it. ."
But where did the previous information go?
The operator said that users can uninstall the Ruishi APP directly.
"After uninstalling the App, the facial recognition information is gone."
Ruishi App "Service Agreement" shows: If you stop using the service or the service is terminated or cancelled, Ruijia Technology can permanently delete your data from the server.
After the service is stopped, terminated or cancelled, Ruijia Technology is not obliged to return any data to you.
Zhang Yanlai, the attorney representing the "First Face Recognition Case in China" and Zhejiang Kenting Law Firm, stated that there are currently no mandatory standards for the collection and storage of sensitive personal information such as faces at the legislative level, and service providers can easily escape responsibility if something goes wrong. , Even if it takes responsibility, the cost is relatively low.
"Internet infringement is different from offline infringement. Offline infringement has obvious pertinence, usually one-to-one, but Internet infringement is one-to-many. As long as one user has this problem, theoretically all users have the same problem. "
But if you go to law, it is usually a matter of discussion.
"In the first case of face recognition, Guo Bing sued the zoo and the compensation he could get was very low. As long as other similar users did not go to the court to claim, their rights and interests would not be protected." Zhang Yan said.
Focus 1
Is "human face" considered sensitive information?
At first, Wang Yu refused because he needed to upload too much personal information, ID cards, real estate certificates, etc.
But as her understanding deepened, including the report on the “first case of face recognition” this year, she realized the importance of face as sensitive personal information.
However, the reporter found during the visit that most residents, especially the older residents, believed that the face recognition system brought convenience, and did not realize that the face is also extremely important personal information.
Aunt Wang from the east side of Xibianmen told reporters, “Just give me a message. The face doesn’t matter. Everyone lives in the community. The neighborhood committee knows everything. It’s convenient to take a photo.”
The reporter stopped at the gate of Yuanwuqu Community for half an hour, and most residents chose to enter with their faces.
The security guard told reporters that there are less than 1,000 households in the community, and only a dozen households have not entered information.
Zhang Yanlai said that personal information is divided into general personal information and sensitive personal information. Faces, fingerprints, DNA, etc. are all sensitive personal information. Once leaked, it is difficult to recover and will have a great impact on personal and property safety.
According to CCTV reports, on some online trading platforms, you can buy thousands of face photos for only 2 yuan, and more than 5,000 face photos are priced at less than 10 yuan.
If these face photos containing personal information fall into the hands of criminals, the owner of the photo may not only encounter precision fraud and suffer property losses, but also may be used for money laundering, criminal gangs and other illegal crimes due to their own face information. Activities while being involved in criminal proceedings.
The collection of face information also has the characteristic that it is difficult to detect.
"It is non-contact and imperceptible. Walking on the road, the camera sees you and has already captured you." Zhang Yan said.
Zhao Zhanzhu, deputy director of Beijing Zhilin Law Firm and a special researcher of the Intellectual Property Research Center of China University of Political Science and Law, also told the Beijing News reporter that we need to transfer certain personal information to obtain services.
However, face information is highly sensitive personal information with high security risks and hidden dangers, and it is difficult to remedy once it is leaked.
"We can change the account password, but can we change faces?"
"A few seconds of saving my face is of little value to me." Lao Dongyan, a professor at Tsinghua University Law School, said in an interview earlier that people don't necessarily like to trade privacy for security for convenience.
"I sent an article to two community groups to remind that none of the owners opposed it, but there were many in favor. As long as the risks are truthfully disclosed, people will immediately realize that privacy should not be exchanged for convenience. This is probably Making a deal with the devil."
Focus 2
Who has the right to collect facial information?
The reporter visited a number of communities equipped with face recognition systems and found that most of these communities introduced third-party companies to provide "face-brushing" services, including Ruishi, Black Sesame Intelligent Technology, etc.
"The information collectors are all private companies." Wang Yu questioned the reliability of information collection.
The methods of collecting information are also different. In the Dongli community of Xibianmen, Beijing Railway Heyuan, Guang'anyuan and other communities, the manufacturer will collect the information in the community within a certain period of time; you can also directly download the "Rise Vision" App and upload personal information. Materials and information are reviewed by the neighborhood committee and street; in addition, you can also go to the neighborhood committee to handle it on-site.
In Xinyijiayuan, you need to log in to the "Dangxin E Home" WeChat official account, bind your face to the electronic access card, and then you can swipe your face to enter the community.
The Civil Code, which will come into effect on January 1, 2021, stipulates that the collection of personal information must comply with the three principles of necessity, legality, and legitimacy, and the explicit consent of the information subject must be obtained.
The new version of the "Information Security Technology Personal Information Security Specification" implemented on October 1 this year also requires that before collecting personal biometric information such as faces and fingerprints, personal information subjects should be separately notified of the purpose of collecting and using personal biometric information , Method and scope, and storage time and other rules, and obtain the express consent of the personal information subject.
That is, the dual requirements of "individual notification" and "obtaining express consent" are made for those who collect personal information.
What is "express consent"?
Zhang Yanlai told the Beijing News reporter that unilateral notification is not allowed, and there must be a process of agreement and confirmation.
The collecting party seeks the opinions of the collecting party, and the collecting party actively expresses its willingness to provide information without being forced.
Most residents who register information in a unified way do not have a high degree of understanding of the collection procedures and uses.
Aunt Wang and Ms. Li from the Dongli Community of Xibianmen recalled that at that time, the head of each building notified the collection of information, and then everyone went to the neighborhood committee to take pictures and input personal information.
In the Science and Technology Ruifu of Fangshan District, the property issued a notice at the end of August that the community is currently collecting information from the face and number plate recognition system. It is required to send my photo, remarks on room number, name, and license plate number to the mailbox, Ms. Chen I turned in my information after seeing the notice.
If the residents choose to fill in the information in the third-party software, the relevant "Privacy Policy" and "Service Agreement" will be displayed, but they need to be clicked separately to check.
Zhang Yanlai said that the transfer of personal information and convenience means that both parties reach a transaction in economics. From a legal point of view, both parties need to understand the background of the transaction, their respective rights and obligations, etc. Only when the information disclosure is complete, both parties Each can make rational decisions.
■ Link
Zhejiang plans to legislate to ban the mandatory installation of face recognition equipment in communities
On October 26, the "Hangzhou City Property Management Regulations (Revised Draft)" was submitted to the Standing Committee of the 13th Hangzhou Municipal People's Congress for deliberation.
The draft stipulates that property service providers shall not force owners to use shared facilities and equipment through biometric methods such as fingerprints and face recognition.
If the revised draft is passed, the "Hangzhou City Property Management Regulations" will become the first formal legislation in China that regulates residential face recognition.
Guo Bing, the chief prosecutor of the "First Face Recognition Case", told the Beijing News that at the legislative hearing organized by the Hangzhou Judicial Bureau, he made suggestions as a presenter.
"The draft at the time of the hearing does not have any provisions on the protection of the owners' personal information, and it is necessary to increase the owners' privacy and personal information protection systems."
He also specifically mentioned that in view of the special sensitivity of biometric information (especially facial feature information), it is necessary to strengthen its targeted protection.
Guo Bing believes that in order to better resolve the current disputes caused by the current owner committees and property service personnel compulsory installation of facial recognition access control equipment, it is necessary to strengthen the protection of owner biometric information (especially facial feature information) in the revised draft. , Prevent the illegal operation of the owners committee and property service personnel.
Zhang Yanlai believes that this practice in Hangzhou will have a good demonstration effect in China.
"The laws and regulations involved in this kind of thing are complicated in all aspects, and it is difficult to expect ordinary citizens to defend their rights." He said that the better way is to pass local targeted legislation and slowly gain national recognition. Only then can we protect sensitive personal information more effectively.
Beijing News reporter Wang Jun Luo Xiaojing