The letter, signed by EFF alongside Big Brother Watch, Liberty, Open Rights Group, Statewatch, Stopwatch, Defend Digital Me, and Race Equality First, targets a specific deployment plan called Operation View — and the operational detail that should worry anyone tracking biometric data governance is the watchlist itself, not just the cameras. Live facial recognition works by converting a police-curated list of names and faces into a real-time matching pipeline against every pedestrian who passes a camera; the composition and provenance of that list is the actual policy question, and Nottinghamshire’s reported inclusion of children as young as 11 turns a low-level anti-social-behaviour list into a biometric enrollment program for minors with no disclosed retention, review, or appeal process described in the letter.
Britain has no bespoke statutory framework for police LFR — deployments run on a patchwork of common-law policing powers and data-protection impact assessments that individual forces write themselves, which is precisely why campaigners keep petitioning force-by-force rather than pointing to a regulator. That gap is the through-line for anyone in the data-market business watching UK biometric procurement: whoever supplies Nottinghamshire’s matching software (unnamed in the letter) is operating with far less legal exposure than a commercial data broker would face processing the same volume of biometric identifiers under UK GDPR’s special-category rules.
A police watchlist that reportedly enrolls an 11-year-old is a biometric database problem before it is a surveillance-ethics problem — and databases are exactly what this beat is supposed to scrutinize.
The polling cited — Liberty’s finding that 48% oppose suspicionless high-street face scanning, and Opinium’s finding of majority opposition to school-based facial recognition — is being used here as political ammunition rather than independent verification of Nottinghamshire’s specific plans; EFF is the sole author of the underlying claims about Operation View, and no independent reporting on the force’s watchlist criteria or vendor contract was available at publication. What would change this read: a public copy of Nottinghamshire’s data protection impact assessment, disclosure of the watchlist inclusion criteria, or a response from the force itself — none of which the letter indicates has yet been produced.
Reporting suggests that the force already possesses “a watchlist of young people believed to be causing the most problems,” including children as young as 11 years old. It would be highly disproportionate to deploy live facial recognition to tackle this behaviour.
