China has announced new regulations on facial recognition technology that will take effect on June 1, 2025. The measures aim to enhance data security and protect personal information amid concerns about the misuse of biometric data.

The regulations, known as the Administrative Measures on the Security of Facial Recognition Technology Application, were issued by the Cyberspace Administration of China and the Ministry of Public Security. They establish strict standards for the collection, storage, and use of facial data by companies and organizations.

The new rules stipulate that facial recognition may only be used for clear, specific purposes grounded in necessity. Data handlers must obtain explicit, informed consent—especially for minors under 14, where parental or guardian approval is required.

The regulations prohibit making facial recognition the sole method of identity verification when other options exist. They also ban installing such systems in private areas within public venues, including hotel rooms, restrooms, and fitting rooms.

Organizations handling facial data of over 100,000 individuals must file with provincial-level cybersecurity authorities within 30 working days.

Recent facial recognition developments