The Home Office says it will legislate on police use of facial recognition, creating a new regulator with injunction powers. Shops that use the tools will get a separate code. If the plans move forward, a UK facial recognition law regulator would give the country its first dedicated statutory rulebook for live biometric surveillance.

The source report is brief, and many details remain unanswered. Here is what is known, what is not, and what it could mean for people who walk through UK high streets.

What the Home Office Is Proposing

According to the report, the Home Office intends to put police facial recognition on a statutory footing. In practical terms, that means Parliament would pass a law specifically governing how police can use the technology, rather than relying on a patchwork of existing rules.

Two elements stand out:

  • A new regulator with the power to seek injunctions.
  • A separate code for shops that use facial recognition tools.

The proposal follows growing attention on camera deployments in busy public areas. For background on the expanding deployments that prompted the legal tightening, see our earlier piece on Oxford Street cameras and the push for UK police facial recognition rules.

The source does not say when a bill might be introduced, what the consultation will look like, or which specific uses of the technology would be permitted or restricted. Those points will matter a great deal.

How the New Regulator's Powers Could Work

The headline detail is that the regulator would have injunction powers. An injunction is a court order that requires a party to stop doing something, or to do something specific. Giving a regulator the ability to seek one suggests it could go to court to halt a use of facial recognition judged to be unlawful, rather than only issuing guidance or recommendations.

That would be a meaningful shift from voluntary or advisory oversight. However, the source gives few details, so several questions remain open:

  • Which body will act as the regulator, and will it be new or an existing one with expanded powers?
  • Will it oversee only police, or other users as well?
  • What standards will it enforce, such as accuracy thresholds, watchlist criteria, or limits on where cameras can be placed?
  • Will there be fines, reporting duties, or public transparency requirements alongside injunctions?

Until the legislation or a consultation paper appears, it is not possible to say how strong the regime will be. Injunction powers are a useful enforcement tool, but their value depends on the rules they are used to enforce.

Why Shops Get a Separate Code

The report says retailers using facial recognition will be covered by a separate code rather than the police framework. That distinction makes sense in principle: police and private businesses operate under different legal powers and for different purposes. Police act in the name of public safety and law enforcement, while shops are private operators typically focused on theft and security.

A separate code also raises questions. A code is generally less binding than primary legislation, and the source does not say whether it will carry legal force or how compliance would be checked. It also does not say whether the new regulator would oversee retail use. Readers who shop in stores with facial recognition should watch for details on signage, data retention, and how people can challenge being wrongly flagged.

What This Means For You

For most people, nothing changes immediately. The plan is a statement of intent, and legislation takes time. But the direction is notable: the government is acknowledging that the current rules for live biometric surveillance need a clearer legal basis.

If the law is well designed, it could bring clearer limits, independent oversight, and a route to challenge misuse. If it is weak, it could instead formalise broader use of the technology without strong safeguards. The details will decide which outcome is more likely.

Steps You Can Take to Limit Biometric Tracking

No tool can fully prevent being scanned by a camera in a public place, and a VPN does not affect cameras on the street. Still, there are sensible steps:

  • Look for signage. Organisations using facial recognition are generally expected to tell people. Note where it is used.
  • Review photo privacy settings. Limit who can see and download your public photos on social platforms, since images online can feed face databases.
  • Ask questions. You can ask a retailer how it handles biometric data, and you can make a data access request to see what an organisation holds about you.
  • Respond to consultations. Public input is often invited when new laws are drafted.
  • Secure your accounts. Strong, unique passwords and multi-factor authentication protect the other personal data that can be linked to your identity.

What to Watch Next

The UK facial recognition law regulator remains a concept for now. Key things to follow are the consultation, the text of any bill, the identity and funding of the regulator, and whether the retail code will be enforceable. We will keep tracking developments as details emerge. In the meantime, our report on the Oxford Street camera deployments and the rules that followed offers context on why this legal tightening is happening, and it is worth following the consultation and legislation closely as they take shape.