TL;DR: February 2nd, 2025: EU's AI Act bans facial recognition in public spaces. Violators face €35 million fines. Meanwhile, Amazon launches Ring face scanning in December across America (except Illinois/Texas). UK installs permanent face cameras in Croydon. China scans 1.4 billion faces "in seconds." Canada and Australia? Still writing the rules while the tech runs wild.
Europe: €35 Million Says No
February 2nd, 2025, the EU's AI Act went live. Real-time facial recognition in public spaces? Banned. Scraping faces from the internet? Banned. Emotion detection at work? Banned. The fine: €35 million or 7% of global revenue, whichever hurts more.
Ring works in Germany, UK, Ireland, and Austria. But watch what features they disable. The EU classifies facial recognition as "special category data" under GDPR Article 9. Translation: You need explicit consent from everyone scanned. Good luck getting that from your delivery driver.
Smart doorbell owners in Europe must already configure "privacy zones" to avoid recording neighbors. Must post visible signs. Must complete Data Protection Impact Assessments for commercial use. The EU didn't wait for companies to self-regulate. They regulated.
The kicker: Police can't use real-time face scanning on crowds even with the AI Act's law enforcement exceptions. Requires judicial authorization and fundamental rights assessments. Compare that to America where Ring hands footage to cops 11 times a year without warrants.
America: State-by-State Chaos
Amazon's December rollout of Ring's "Familiar Faces" is a legal experiment. They're launching everywhere except Illinois, Texas, and Portland. Why those three? Because they have biometric laws with teeth.
Illinois's Biometric Information Privacy Act (BIPA) cost Facebook $650 million. Texas extracted $1.375 billion from Google for Nest cameras. Meta paid Texas another $1.4 billion. Portland straight-up banned private sector facial recognition.
The other 47 states? Amazon's betting they won't enforce their laws. They're probably right. Most states have privacy laws on the books, but without private rights of action or statutory damages, they're paper tigers.
Senator Markey called Ring's face scanning "a serious threat to the public's privacy." Amazon's response? Launch it anyway, make it opt-out by default, and remind users to "comply with applicable laws." Classic American approach: innovate first, litigate later.
UK: Full Speed Ahead
The UK went the opposite direction. Metropolitan Police installs permanent facial recognition cameras in Croydon, South London, summer 2025. Not temporary deployments. Permanent street furniture.
UK cops now use facial recognition on their smartphones. Point, scan, identify. No warrant needed. No oversight required. The UK has no specific legislation regulating facial recognition – just vague data protection guidelines everyone ignores.
Ring operates freely in the UK. No feature restrictions announced. The Information Commissioner's Office issued "guidance" but no hard rules. Meanwhile, the UK quietly builds China-style surveillance infrastructure with American corporate partners.
The contrast with the EU is stark. While Brussels bans the tech, London mounts it on lampposts. Brexit meant freedom from EU privacy laws. Turns out that freedom cuts both ways.
China: The End Goal
China's Communist Party claims its system scans 1.4 billion faces "in seconds." They're not hiding it. They're bragging about it. Social credit scores, minority tracking in Xinjiang, protest identification – it's all connected.
China introduced "rules" on facial recognition in 2025. But read the fine print: Wide exceptions for "national security and public safety." Which in China means everything the government wants to do.
Here's what should terrify you: American companies provide the tech. Chinese firms perfect the implementation. UK adopts the methods. The surveillance state isn't imported – it's franchised.
Ring's infrastructure could enable China-style tracking. The "search party" feature that finds lost dogs? Same tech finds people. The difference between democracy and authoritarianism becomes just a software update.
Canada and Australia: Writing Rules While Tech Runs Wild
Canada updated its privacy guidance August 11, 2025. Requirements: meaningful consent, privacy impact assessments, alternatives to biometric authentication. Sounds good on paper. But Bill C-27, which would've created real AI oversight, died when Parliament prorogued. Quebec's the only province with actual biometric legislation.
The Privacy Commissioner warns against "no-go zones" like mass surveillance. But warnings aren't laws. Clearview AI still operates despite privacy violations. Ring faces no restrictions. Canadian privacy law is all bark, no bite.
Australia's even further behind. Still running on the Privacy Act of 1988. Yes, 1988. They found Clearview AI violated privacy in 2021 but haven't issued a fine. Maximum penalty if they do? AUD$2.22 million. That's couch cushion money for Amazon.
Both countries are "reviewing" and "considering" and "drafting guidance" while facial recognition deploys nationwide. By the time they pass laws, the infrastructure will be so embedded, regulation becomes decoration.
The Global Surveillance Divide
We're watching the world split into surveillance camps:
The Banners
EU: €35 million fines, judicial oversight required, public space bans
Portland: Total private sector ban
Illinois/Texas: Billion-dollar settlements
The Embracers
UK: Permanent street cameras, smartphone scanning
China: 1.4 billion faces in database
Most US States: No enforcement despite laws
The Fence-Sitters
Canada: Guidelines without teeth
Australia: 1988 laws for 2025 tech
Rest of World: Watching and waiting
What This Means for You
Your privacy depends on your zip code. Live in Illinois? Protected. Live in Idaho? Scanned. Travel to London? Tracked. Visit Brussels? Safe.
Ring's December launch is a test case. If Americans don't revolt, expect face scanning in every doorbell by 2026. If lawsuits fly and settlements hit billions, watch Amazon suddenly discover "technical limitations" in expanding the feature.
The EU proved regulation works. Companies disable features rather than pay fines. But it requires political will America lacks and enforcement Australia can't afford.
Here's the brutal truth: We're five years from ubiquitous facial recognition or comprehensive bans. No middle ground. Either your face becomes a tracking number, or governments protect your biometric autonomy. The choice gets made now.
Protect Yourself Based on Location
If You're in America
• Move to Illinois, Texas, or Portland (seriously)
• Support state biometric laws with private rights of action
• Document every Ring camera you pass
• Join class actions when they launch
• Pressure local government for city-level bans
If You're in Europe
• Report GDPR violations to data protection authorities
• Demand privacy impact assessments from businesses
• Know your Article 9 rights
• Support maintaining strong AI Act enforcement
• Watch for law enforcement exception creep
If You're Elsewhere
• Assume you're being scanned
• Wear hats and sunglasses
• Support privacy organizations
• Demand legislation before infrastructure embeds
• Learn from EU's example – regulation works
References
- Biometric Update - EU ban on 'unacceptable' AI comes into force
- EU Artificial Intelligence Act - Article 5: Prohibited AI Practices
- EDRi - How to fight Biometric Mass Surveillance after the AI Act
- EFF - The Legal Case Against Ring's Face Recognition Feature
- Senator Markey Demands Amazon Abandon Facial Recognition Plan
- Privacy Commissioner of Canada Publishes Guidance on Biometrics
- Facial Recognition and AI in Australia - Do We Need More Rules?
- UK ICO - Smart Doorbells Commercial Use Guidance
- BC Court Requires Clearview AI to Comply with Privacy Laws
- CDT - EU AI Act Must Reject Chinese-Style Surveillance