Facial recognition in schools privacy is back in focus after two developments landed together. Karnataka, India, has ordered face-scan attendance for government and aided schools for the 2026-27 year, and Privacy International has published a new map documenting where such systems are used, who supplies them, and where they have been banned or fined.
The source reporting is brief, so this post sticks to what it states and to general guidance for parents.
What Karnataka has ordered and why attendance is tied to meal schemes
According to the reporting, Karnataka has ordered face-scan attendance for pupils in government and aided schools in 2026-27. Officials link the attendance data to meal-scheme counts. In practice, that means the number of children recorded as present can feed into how many meals are planned and accounted for.
That is a clear administrative goal, and it is worth taking at face value. Accurate counts matter when public money pays for food. But the same reporting notes that critics are warning about the approach. The core question is not whether attendance should be accurate, but whether a biometric scan of a child's face is a proportionate way to achieve it, compared with simpler methods such as a roll call or a card.
The article excerpt available to us does not detail which vendor will run the system, how long images will be kept, or who will have access. Those are exactly the details parents should look for in official circulars.
What Privacy International's map reveals about vendors, bans and fines
Privacy International's new map logs named schools, vendors, bans and fines linked to facial recognition in education. That combination is useful because it turns a scattered topic into something people can check.
Three things stand out about the approach:
- Named schools: it ties the technology to specific places rather than vague claims about adoption.
- Vendors: it shows which companies supply the systems, which helps parents ask who actually holds their child's data.
- Bans and fines: it records where regulators or authorities have pushed back, showing that school deployments are not a settled matter everywhere.
The broader pattern echoes pushback in other sectors. We have covered how a majority of the New York City Council now backs a measure that would curb facial recognition at arenas and stadiums, and examined the risks of facial recognition at sports venues. Schools are a different setting, because the people being scanned are children who usually cannot meaningfully opt out.
Why children's facial data carries lasting risks
A password can be changed after a leak. A face cannot. That is the central reason biometric data deserves more caution than most other records, and the concern is sharper for children, whose data could remain relevant for decades.
Several risks are worth understanding:
- Permanence: if a facial template or image is exposed, it cannot be reset.
- Function creep: data collected for attendance could later be reused for other purposes unless rules clearly forbid it.
- Security of storage: any database of children's faces becomes a target. Ransomware groups remain very active; our look at the August 2026 ransomware wave shows how many organizations are hit in a single month.
- Consent: children cannot consent in a meaningful way, and parents may not be offered a real alternative.
None of this proves a particular system is unsafe. It explains why transparency about retention, access and security matters so much.
What This Means For You
If you are a parent in Karnataka, the order applies to government and aided schools in 2026-27, so it is reasonable to expect questions to come up at your child's school. If you live elsewhere, the map is a reminder that these systems exist in many places and that rules differ widely.
You do not need to be a technical expert to ask good questions. Consider raising these with your child's school or education authority:
- Who is the vendor, and does that company have access to the images or templates?
- Where is the data stored, and for how long is it kept?
- Is the data used for anything beyond attendance, such as meal counts, and who can see those records?
- Is there an alternative for families who do not want their child scanned?
- What happens in a breach, and how would families be told?
- How can data be corrected or deleted, and who handles those requests?
Written answers are better than verbal ones. If a school cannot answer, that is useful information in itself.
Takeaways
Facial recognition in schools privacy is no longer a niche worry. Karnataka's order shows how attendance, public meal programs and biometrics can become linked, and Privacy International's map gives families a way to see how widely similar systems are used and where authorities have acted.
Start by browsing the Privacy International map as a reference, then put the questions above to your child's school. For context on how other sectors are responding to the same technology, see vpn.social's wider facial recognition coverage, including the pieces linked above.
