NHS Digital, iProov facial recognition deal raises transparency concerns

A contract between the UK's NHS Digital and private tech company, iProov, to collect and store facial verification data via the NHS app raised concerns about transparency and accountability . iProov’s technology is used to ensure people are genuinely present when using NHS login to access the NHS App . The process involves new users recording a video of their face, which is then sent to iProov to compare the facial data with anonymised photo IDs held by the government . However, privacy campaigners called for transparency on how data is used and stored . The contract between iProov and NHS Digital was not published, reportedly for "security reasons" . This decision was criticised as "unnecessarily undermining trust" . Despite assurances from both iProov and NHS Digital that app users’ biometric data is anonymised and guarded via the best possible security protection, digital rights and privacy campaigners expressed concerns about the secrecy surrounding iProov’s use of data . They argued that anyone who sends personal information to a private company, at the encouragement of the NHS, has a right to know exactly what happens to their data . This controversy highlighted the ethical implications of data privacy and the need for transparency and accountability in the use of facial recognition technology, especially in the public service. System 🤖 iProov Operator: NHS Digital Developer: iProov Country: UK Sector: Health Purpose: Store facial verification data Technology: Facial recognitio n Issue: Privacy; Security

Date it happened

2021-09-01

Organisation involved

NHS Digital

Product, system or model

iProov Face Verifier

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.