The landscape of law enforcement technology is evolving rapidly, with AI-powered facial recognition systems at the forefront. In 2026, the integration of these systems into police operations has sparked significant debate, particularly concerning privacy and civil liberties. This article explores the legal framework governing the use of AI facial recognition by law enforcement agencies, highlighting the key provisions and controversies.
As technology advances, so too must the legal structures that govern its use. The Regolamento europeo 1689 of 2026 set the stage for national legislations to adapt, and in 2026, the focus is on balancing the benefits of AI facial recognition with the need to protect individual rights. This delicate equilibrium is at the heart of the ongoing discussions and legal developments.
The Legal Framework for Real-Time AI Facial Recognition
One of the most contentious aspects of the new legislation is the use of AI facial recognition in real-time by law enforcement. Article 8 of the decree outlines specific conditions under which this technology can be employed. It permits the use of AI systems for the remote identification of individuals in public spaces, but only under exceptional circumstances.
These circumstances include the prevention of serious threats such as terrorist attacks, the protection of life and personal safety, and the search for missing persons or victims of serious crimes like human trafficking or sexual exploitation. The activation of these systems requires a motivated request from high-ranking officials, such as the questore or commanders of provincial police forces, and must be authorized by the judicial authority.
The authorization process is rigorous, specifying the purpose, duration (not exceeding 15 days, with possible extensions), the affected area, and the individuals being sought. This meticulous approach aims to ensure that the use of AI facial recognition is both justified and proportionate to the threat at hand.
Emergency Provisions and Controversies
In cases of urgency, the legislation allows for the immediate activation of AI facial recognition systems by law enforcement. However, this provision has been met with criticism. While the systems can be activated without prior authorization, law enforcement must notify the prosecutor’s office and submit a formal request for authorization within 24 hours. The judicial authority then has another 24 hours to review and approve the request.
The controversy stems from the potential for abuse and the lack of immediate oversight. Critics argue that the emergency provisions could lead to indiscriminate use of AI facial recognition, compromising the privacy rights of citizens. The debate highlights the need for a robust legal framework that can adapt to the dynamic nature of law enforcement technology.
Post-Event AI Facial Recognition and Data Retention
Article 10 addresses the use of AI facial recognition for post-event analysis. This provision allows law enforcement to use these systems after a crime has been committed, including attempted crimes. The purpose is to identify suspects based on existing video and photographic evidence, under the direct supervision of a designated officer of public security.
In situations where public order and security are at risk, the legislation permits the installation of surveillance systems equipped with AI facial recognition capabilities. These systems can collect and store biometric data of individuals present at specific locations or events, such as stadiums or concerts. The collected data is retained for a period of seven days from the date of collection.
The retention of biometric data raises significant privacy concerns. While the legislation aims to strike a balance between public safety and individual rights, the potential for misuse remains a pressing issue. The ongoing debate underscores the importance of continuous review and adaptation of the legal framework to ensure it remains effective and respectful of fundamental rights.



