Failing to recognize someone does not detract from their privacy. If they fail to recognize everyone who isn't opted in, who is harmed?

Sure it does. Failing to recognize someone at scale can very much impact someone's privacy. Holes in data are, in and of themselves information.

For example, if an unrecognized face was logged on 47th street, then an unrecognized face was logged on 50th, then 52nd, then 55th (where a crime occurred), then back down to 47th, you might be able to draw some patterns about where to look for your suspect even if they hadn't opted in.

Edit: Also, you are trusting that the system isn't storing markers for people it doesn't recognize. My concern would be that if I opt in later, suddenly all my past history becomes discoverable. That's a lot of trust to put in the hands of private firms (or the police), neither of which I'm comfortable holding that information.

Excellently put. Also, just because it didn't generate a facial ID hit, doesn't mean they can't use ReID and track the descriptor vector.

In fact if I were a not-quite ethical user of facerec, I'd flag and bin all vectors and image chips that failed to ID.

I work on facerec and ReID. But it's for deep fake detection and the like, blue team stuff. But the deep ID technologies are very concerning to me in general.

Honestly this is a really, really good point I hadn't thought of (and well articulated) and I think you've changed my mind on prohibition v. opt-in.

The problem with this argument is the assumption that everyone gets a facial scan and the computer processes the data all the same, in order to recognize whether the individual is recognizable or not. How can we be sure that that data is not getting saved for later? The system is too ripe for abuse and everyone loses their privacy.

It will try to recognize you but you will not be in the database, so it will say match not found. Presumably nothing would be stored about you in that interaction

> Presumably nothing would be stored about you in that interaction

Given how prevalent the tracking of users is, anonymous or otherwise, I'd be extremely pessimistic about this assumption.

Same here. I don't want the system to even try to recognize me. No one's doing this stuff on site, which means that they'd be uploading my face to a cloud provider and using their system, which means they'd be doing the things people are having a problem with in the first place.

And no one would ever lie about such things for a profit.

Are there logs?