Portland's Facial Recognition Ban: 5 Years Later

The first city to ban private AND government facial recognition. Did it work?

TL;DR: In September 2020, Portland, Oregon banned facial recognition technology for both city government AND private businesses in "places of public accommodation." It was the first US city to extend the ban to private entities. The government ban took effect immediately; the private ban started January 1, 2021. Five years later, the ban remains in effect. At least one lawsuit has been filed against a private business for alleged violations. Other cities have followed Portland's lead. But enforcement questions remain, and the technology continues advancing.

What Portland's Ban Actually Does

Portland's ordinance has two parts [1]:

Part 1: Government ban (effective September 2020)

  • Prohibits all City of Portland bureaus and offices from acquiring or using facial recognition technology
  • Covers police, parks, transportation, and all city departments
  • No exceptions for criminal investigations

Part 2: Private sector ban (effective January 1, 2021)

  • Prohibits use of facial recognition in "places of public accommodation"
  • Covers stores, restaurants, hotels, theaters, banks, and similar businesses
  • Applies within Portland city limits

The private sector ban was groundbreaking. San Francisco and others had banned government facial recognition. Portland was first to say: businesses can't do it either.

Why Portland Passed It

The city council cited several concerns [2]:

  • Racial bias: Studies showed facial recognition had higher error rates for people of color and women
  • Privacy: The technology enables mass surveillance without consent
  • Chilling effects: People change behavior when they know they're being tracked
  • Lack of transparency: Most facial recognition deployment happened without public knowledge
  • Preemptive action: Better to establish rules before the technology becomes entrenched

Commissioner Jo Ann Hardesty, who sponsored the ordinance, framed it as a civil rights issue: communities of color would bear the brunt of errors and overpolicing.

What's Happened in 5 Years

The Ban Held

Unlike some cities that passed bans and then carved out exceptions, Portland's prohibition has remained relatively intact. The city hasn't deployed facial recognition, and the private sector ban remains on the books.

At Least One Lawsuit

In early 2023, at least one lawsuit was filed against a private entity for allegedly violating Portland's facial recognition ban [3]. Details are limited, but it demonstrates the ordinance has enforcement mechanisms that are being used.

No Known Major Evasions

There haven't been major scandals involving Portland city agencies secretly deploying facial recognition. Whether that's because of the ban or because no one was planning to deploy it anyway is unclear.

Technology Advanced Anyway

Facial recognition technology continued improving. Error rates dropped. Deployment costs fell. Other surveillance technologies (like Flock Safety ALPRs) expanded. Portland's ban addressed one specific technology while the broader surveillance landscape evolved.

The Limitations

Portland's ban isn't a complete victory. Significant gaps remain:

  • Federal exemption: Federal agencies operating in Portland aren't covered. CBP, ICE, FBI can still use facial recognition within city limits.
  • County exemption: Multnomah County (which contains Portland) isn't bound by the city ordinance. County services could theoretically use the technology.
  • Private enforcement: The private sector ban relies on complaints and lawsuits. How many violations happen undetected?
  • Definition questions: As AI advances, what counts as "facial recognition"? Age verification? Emotion detection? Demographic analysis?
  • Geographic limits: The ban ends at city limits. Residents are still tracked everywhere else they go.

Portland banned one tool in one jurisdiction. The surveillance apparatus extends far beyond.

Portland's Influence

Portland's approach influenced other jurisdictions:

  • Other cities: Baltimore, Boston, and others referenced Portland when considering their own bans
  • Private sector precedent: Portland proved you could ban private facial recognition without businesses leaving
  • Legislative model: The ordinance language has been adapted for other proposals
  • Thurston County, WA: Currently proposing comprehensive AI surveillance limits including facial recognition
  • Oregon statewide: ALPR regulation discussions draw on Portland's experience with surveillance limits

Even where Portland's exact approach wasn't copied, it demonstrated that comprehensive surveillance bans were possible, and that businesses adapt.

What's Next

The ban is five years old, but questions remain:

  • Definition updates: As AI changes, will the ordinance need updating to cover new forms of biometric surveillance?
  • State preemption risk: Some states have passed laws preventing local governments from restricting surveillance technology. Oregon hasn't, but it's a risk.
  • Enforcement resources: Does Portland have the capacity to investigate violations, especially in the private sector?
  • Federal pressure: Federal agencies continue expanding facial recognition. Will federal pressure eventually override local bans?

The ban isn't self-enforcing. It requires ongoing political will, resources, and adaptation to remain meaningful.

Lessons for Other Cities

Comprehensiveness Matters

Portland's inclusion of private businesses set it apart. A government-only ban leaves surveillance in private hands.

Preemption is Key

Passing the ban before technology became entrenched was easier than removing it after. Act early.

Enforcement Needs Teeth

Private lawsuits have been filed. The ban has meaning because violations have consequences.

Technology Evolves

Five years later, the surveillance landscape looks different. Bans need maintenance and updates.

The Bottom Line

Portland's facial recognition ban (the first to cover both government and private businesses) has now been in effect for five years. It held. No major evasions became public. At least one lawsuit was filed. Other cities drew inspiration from it.

But it's not a complete solution. Federal agencies aren't covered. Definitions may need updating as AI evolves. Enforcement depends on complaints and resources. And facial recognition is just one of many surveillance technologies.

What Portland proved: you can ban facial recognition for government and businesses, and the city doesn't collapse. Life goes on. Commerce continues. The surveillance that didn't happen: we'll never know what it would have enabled.

That's the point of preemptive regulation. Prevention doesn't make headlines. The harm that didn't occur is the success.

References

  1. Portland City Code: Chapter 34.10: Facial Recognition Technologies
  2. Davis Wright Tremaine: Portland's Comprehensive Facial Recognition Ban
  3. Info Law Group: Portland Facial Recognition Ordinance: First Lawsuit Filed (2023)
  4. CNET: Portland Bans Facial Recognition for Private Companies (2020)
  5. National Law Review: Portland Becomes First City to Ban Private Facial Recognition