What Are The Rules?

From the start of 2026, anyone buying, selling, transferring, or exchanging cryptoassets through a cryptoasset service provider must provide specific identifying information, or risk penalties. The change forms part of the UK’s implementation of the Cryptoasset Reporting Framework, commonly known as CARF, an international standard developed to improve tax transparency around cryptoassets.

Will Link Crypto Activities To Tax Record

According to guidance published by HM Revenue & Customs, the information collected by crypto platforms is to be used to link a person’s crypto activity to their tax record. HMRC says this “makes it easier for us to find out what tax you need to pay”, emphasising that the measure is designed to support enforcement of existing tax rules rather than introduce a new form of crypto taxation.

Applies Whether The Crypto Service Is In The UK Or Not

HMRC says the reporting obligation applies regardless of whether the cryptoasset service provider is based in the UK or overseas. For example, as HMRC’s guidance states on its website, users must provide the required information “to every cryptoasset service provider you use, even if they’re not based in the UK”.

What Information Is Needed?

The details required depend on whether the user is an individual or an organisation. For example, individual users must provide their full name, date of birth, and the address and country where they normally live. They must also supply a tax identification number. For UK residents, this will usually be a National Insurance number or a Unique Taxpayer Reference.

Where a person is not eligible for a tax identification number, for example because their country of residence does not issue one, HMRC says it is not required.

Entity users, such as companies, partnerships, trusts, or charities, must provide their legal business name, main business address, and company registration number if they are a UK company. Non-UK entities must provide a tax identification number and the country that issued it. Some entities are also required to provide details of their controlling person.

Incorrect Details Could Result In A Fine

HMRC is making it clear that users must provide accurate information. It says that giving incorrect details, or failing to provide them at all to a UK cryptoasset service provider, can lead to a penalty of up to £300. Where a non-UK provider is involved, the penalty could be higher.

How Penalties And Tax Enforcement Fit Together

The £300 penalty relates specifically to failures to provide accurate identifying information to cryptoasset service providers. It sits alongside, rather than replaces, HMRC’s existing powers to penalise unpaid tax.

HMRC’s guidance warns that if someone has not paid tax they owe on cryptoassets and the tax authority later identifies this, penalties can be far more significant. For example, in such cases, HMRC says penalties can be “up to 100 per cent of the tax due plus interest”. For offshore matters or offshore transfers, penalties can be higher still.

Voluntary Disclosure Facility (For Previous Years) Available

The department is also operating a disclosure facility for people who have underpaid tax on cryptoassets in earlier years, which allows individuals to correct their tax affairs voluntarily for undeclared gains or unpaid tax prior to April 2024.

Why The Focus On Crypto For Tax Authorities?

Cryptoassets have long posed challenges for tax authorities because of their decentralised and cross-border nature. For example, transactions can take place across multiple platforms, wallets, and jurisdictions, often without the kind of centralised reporting that applies to traditional bank accounts.

CARF

Government policy documents describe cryptoassets as a rapidly expanding area where tax authorities have historically had limited visibility. The Cryptoasset Reporting Framework (CARF) was, therefore, developed to address gaps that remained even after the introduction of the Common Reporting Standard. In simple terms, CARF is designed to prevent people from avoiding tax reporting by shifting assets into crypto. It creates a framework under which cryptoasset service providers collect standardised information about users and their transactions, which can then be shared automatically between tax authorities in participating countries.

How International Data Sharing Will Work

CARF is a multinational framework, meaning its impact goes beyond the UK alone. For example, where a UK resident uses a UK cryptoasset service provider, HMRC will use the reported information to link crypto activity to the individual’s UK tax record. Where a UK resident uses a non-UK provider based in a country that has also implemented CARF, the tax authority in that country will share the information with HMRC.

Similarly, if a non-UK resident uses a UK cryptoasset service provider, HMRC will share the relevant information with the tax authority in the user’s country of residence, provided that country also follows the CARF rules.

The UK government has said that the first international exchanges of data under CARF are expected to take place from 2027, reflecting the time required for jurisdictions and businesses to build reporting systems.

How Crypto Is Taxed In The UK

The new reporting rules do not change how cryptoassets are taxed, but they are expected to make enforcement more effective.

In the UK, cryptoassets are generally subject to Capital Gains Tax when they are disposed of. Disposal can include selling crypto for traditional currency, exchanging one cryptoasset for another, spending crypto on goods or services, or gifting it to someone other than a spouse, civil partner, or charity.

If total gains across all disposals exceed the annual Capital Gains Tax allowance, the gains must be reported to HMRC and tax paid. Losses can be offset against gains, and in some cases carried forward to future tax years.

Where cryptoassets are received through employment, mining, or other income-generating activities, Income Tax and National Insurance contributions may also apply.

With this in mind, HMRC has now updated its Self Assessment tax return to include a dedicated section for cryptoassets, reflecting the growing expectation that taxpayers accurately report crypto-related income and gains.

How Widespread Is Crypto Use In The UK?

The changes come at a time when crypto awareness and usage remain significant in the UK. For example, research published by the Financial Conduct Authority shows that public awareness of cryptoassets remains high. Its most recent consumer research found that more than 90 per cent of adults had heard of cryptoassets, while around 8 per cent of respondents reported owning or using them.

The same research indicates that most users rely on centralised exchanges as their main way of accessing crypto, rather than decentralised protocols or peer-to-peer transactions. This is significant because CARF reporting obligations apply primarily to cryptoasset service providers that act as intermediaries.

For many consumers, the impact of the new rules is likely to be experienced through additional identity checks, requests to confirm tax residency, and prompts to supply or update tax identification details.

What The Rules Mean For Crypto Businesses

The change in the rules essentially sees the burden of compliance falling heavily on cryptoasset service providers, which must collect, verify, and report user information and transaction data.

Government impact assessments suggest that businesses already preparing for international CARF obligations may face relatively modest additional costs to extend reporting to UK resident users. Even so, firms may need to update systems, data validation processes, and reporting workflows to ensure information is accurate and submitted in the required format.

Around 50 UK businesses are estimated to be affected by the domestic reporting extension, though overseas platforms serving UK users are also brought into scope where their home jurisdictions implement CARF.

For example, a crypto exchange that already collects customer data for anti-money laundering purposes may still need to restructure how that data is stored and reported so it aligns with CARF requirements around tax residency and transaction reporting.

The Wider Regulatory Context

The introduction of CARF reporting coincides with broader efforts to regulate the UK crypto sector, although those initiatives are progressing on a separate track. The Financial Conduct Authority is currently consulting on proposals for a comprehensive regulatory regime for cryptoassets, covering areas such as exchange standards, conduct requirements, and crypto lending and borrowing. The consultation is due to close in February 2026.

The FCA has been clear that its goal is not to eliminate risk from crypto markets, but to ensure consumers understand those risks and that firms operate to clear standards. David Geale, the FCA’s executive director for payments and digital finance, has said regulation is coming and that the authority wants a regime that “protects consumers, supports innovation and promotes trust”.

For UK crypto users and businesses, the key distinction is that CARF focuses on tax transparency and data sharing, while the FCA’s work addresses how crypto markets operate and how consumers are protected within them.

Challenges and Criticisms

While HMRC says the new reporting framework is about enforcing existing tax law, the changes have prompted some concerns from parts of the crypto industry and from privacy advocates.

For example, one criticism centres on data protection and security. The rules require cryptoasset service providers to collect and store sensitive personal and tax information, sometimes across multiple jurisdictions. Critics argue this increases the risk of data breaches, particularly where smaller or overseas platforms may not have the same security standards as large UK financial institutions.

There are also questions about proportionality. For example, some industry voices argue the rules apply broadly to all users, including those with relatively small holdings or minimal trading activity, potentially increasing compliance friction for people who do not owe any tax. The requirement to provide tax identifiers to every platform used, even where no taxable gain has been realised, has been cited as a source of unnecessary complexity.

From a business perspective, crypto platforms face operational and cost pressures. Although many already collect customer information for anti-money laundering purposes, aligning systems with CARF reporting standards adds technical and administrative overhead, particularly for firms operating across multiple countries with different implementation timelines.

Others point out that CARF does not fully address decentralised finance. Transactions carried out directly on decentralised protocols, without an intermediary acting as a service provider, may remain harder for tax authorities to observe, raising questions about how evenly the rules will apply across the crypto ecosystem.

HMRC has acknowledged that regulation cannot eliminate all non-compliance, but maintains that broader data collection and international information sharing will significantly narrow the gaps that have historically made cryptoassets difficult to tax.

What Does This Mean For Your Business?

The new reporting rules mark a clear change in how crypto activity is treated by the UK tax system, moving it closer to the level of visibility long associated with traditional financial accounts. For individual users, the message is pretty straightforward. Crypto transactions are no longer operating in a grey area, and HMRC now expects crypto activity to be linked clearly and consistently to a person’s tax record, regardless of where the platform they use is based.

For UK businesses operating in the crypto sector, the changes reinforce the idea that compliance and data governance are now central operational requirements rather than secondary considerations. Firms offering exchange, wallet, or portfolio services are being drawn more firmly into the UK’s tax reporting infrastructure, with real implications for system design, data accuracy, and cross-border coordination. Even businesses that already meet anti-money laundering standards may need to rethink how customer data is structured, verified, and reported over time.

More broadly, the rules reflect a wider change in how governments, regulators, and tax authorities view cryptoassets. For example, what was once treated as a niche or experimental asset class is now being integrated into mainstream regulatory frameworks, with greater expectations placed on platforms, investors, and advisers alike. While concerns remain around privacy, proportionality, and coverage of decentralised activity, HMRC’s position is clear that increased transparency is necessary to close long-standing enforcement gaps.

As CARF data sharing begins to scale internationally from 2027, the practical impact of these rules is likely to become more visible across markets. For users, businesses, and regulators, things are clearly moving towards a tighter alignment between crypto activity and existing tax and compliance systems, with fewer opportunities for crypto to sit outside the scope of routine financial oversight.

The post Featured Article : HMRC Wants UK Crypto Buyers’ Details appeared first on Mear Technology.

What Is the Data Use and Access Bill? 

Introduced as a cornerstone of the government’s plan to modernise data governance, the Data Use and Access Bill aims to overhaul existing data laws to improve economic growth, streamline public services, and enhance data security. Originating from a need to update the UK’s data legislation post-Brexit, the bill seeks to replace or amend elements of the EU’s General Data Protection Regulation (GDPR) to better suit national interests. The government claims that streamlining data usage and access could generate £10 billion of economic benefit. While the exact date of its enactment remains uncertain, the bill is expected to come into force within the coming year, subject to parliamentary approval. 

How Will It Affect Our Data Handling? 

At the heart of the bill lies a fundamental shift in how personal data will be managed, accessed, and shared across both public and private sectors. For individuals, this means their data could be used more extensively to improve services, but it also raises concerns about privacy and consent. 

In the context of the NHS, the bill mandates that all IT systems adopt common data formats, enabling real-time sharing of patient information such as pre-existing conditions, appointments, and test results between NHS trusts, GPs, and ambulance services. The Department for Science, Innovation and Technology (DSIT) estimates this could free up 140,000 hours of NHS staff time annually. The government envisions that by breaking down data silos, patient care will become more efficient, reducing medical errors and eliminating the need for repeat tests. 

What About Patient Passports? 

Many people will have heard the term ‘patient passport’. As part of the UK’s NHS digital transformation strategy, this will be the centralised digital record that holds a patient’s comprehensive health information, including medical history, test results, and treatment notes. It’s hoped that this passport will allow healthcare providers to access a patient’s entire medical record seamlessly across different healthcare settings, whether at GP surgeries, hospitals, or through ambulance services. By consolidating data, the aim of patient passports is to reduce redundancies, prevent repeated tests, and improve continuity of care, ensuring clinicians can make quicker, well-informed decisions in critical moments. 

Privacy Warnings 

However, privacy advocates have said that increased data sharing must be balanced with safeguards, including protecting patient passports from third-party access. For example, one key question they’re asking is who exactly will have access to this sensitive health data? The potential involvement of multinational tech firms (known for less-than-stellar transparency records) adds to this concern. For example, the Good Law Project (a key privacy advocate), has raised concerns about the NHS’s partnership with private data firms, especially Palantir, for managing the Federated Data Platform (FDP). They argue that without sufficient scrutiny, sensitive patient data could be open to misuse or could be shared without adequate patient control. The group has highlighted potential issues with the National Data Opt-Out (NDOO), which allows patients to restrict their data from being used outside of their direct care but doesn’t yet fully cover the FDP, sparking concerns that the NDOO’s limitations might not uphold patients’ data rights effectively. 

Beyond Healthcare – The Police 

Beyond healthcare, the bill also proposes allowing police forces to automate certain manual data tasks. Currently, officers must log each instance they access personal information on the police database. Automating such steps could save an estimated 1.5 million hours per year, enabling officers to focus more on frontline duties. While increased efficiency is welcomed, civil liberties groups express concern over potential overreach and lack of oversight. Liberty, a UK human rights organisation, points out that “automation without accountability could lead to unchecked surveillance and data misuse.” 

Infrastructure Too 

The bill also introduces the creation of a digital “National Underground Asset Register,” requiring infrastructure firms to upload data on underground pipes and cables. This initiative aims to reduce the 600,000 accidental strikes on buried assets annually, minimising disruption from roadworks and construction projects. 

A Digital Register of Births and Deaths 

Another aspect of the bill that’s drawn attention is a plan for the creation of a digital register for births and deaths. This register is proposed to simplify how vital records are accessed and managed, with the goal of moving away from paper-based systems. Creating a digital registry should, it’s argued, make it easier for individuals and relevant authorities to access official records, such as birth and death certificates. This digital transformation will also align with broader efforts to streamline public records, similar to electronic registration in other sectors. 

Consumer Data 

The bill also discusses enhancing how consumer data (like energy usage or purchasing history) might be used to provide personalised services. For example, individuals could use data about their energy consumption to choose better tariffs, or purchasing data could inform tailored online shopping deals.  

The Digital Revolution in the NHS 

The digital revolution within the NHS is a critical component of the broader objectives outlined in the Data Use and Access Bill. The government’s new 10-year strategy for the NHS in England aims to transform how patients interact with the health service, mirroring the convenience and accessibility offered by modern banking apps. 

Currently, the NHS App’s functionality is limited due to the fragmented nature of patient records, which are held separately by GPs and hospitals. The government’s push for a single, unified patient record (the patient passport) is intended to bridge this gap. As Health Secretary Wes Streeting has stated, “Moving from analogue to digital is essential if we are to create a more efficient, patient-centred NHS” (BBC, 2023). 

This shift is anticipated to speed up patient care, reduce redundant testing, and minimise medical errors. For example, immediate access to a patient’s full medical history could enable faster diagnosis and treatment decisions, potentially saving lives. 

Open to Abuse? 

However, this digital transformation is not without controversy. Privacy campaigners, such as MedConfidential (a UK group advocating for privacy and transparency in health data usage), have expressed concerns that a single patient record / patient passport system could be “open to abuse” if not properly safeguarded. The involvement of private firms like Palantir, which has been awarded contracts to create databases joining up individual records, exacerbates these fears. As Sam Smith of MedConfidential says, “Handing over vast amounts of sensitive health data to companies with questionable track records poses significant risks to patient confidentiality”. 

Too Hasty? 

There has also been a public backlash against the perceived haste in implementing these changes without adequate consultation. A “national conversation” has been launched to gather public input, but critics argue that more needs to be done to ensure transparency and trust. As Rachel Power, Chief Executive of the Patients Association, said in a Patients Association Statement (2023): “For far too long, patients have felt their voices weren’t fully heard in shaping the health service. Any digital transformation must put patients at the heart of its evolution.” 

The Backlash and Privacy Concerns 

Despite assurances, scepticism remains. For example, the launch of the public engagement exercise was marred by inappropriate and irrelevant submissions, suggesting a disconnect between the government’s intentions and public perception. Also, reports about patient passports and usage of wearable technology (like Fitbits) to monitor health conditions remotely (to offer convenience and improved care) have also raised further privacy issues. 

The British Medical Association (BMA) has expressed caution, stating that any move towards increased data sharing must be accompanied by “rigorous ethical standards and patient consent”. Critics fear that without proper oversight, personal health data could be exploited by private companies or misused by the state. 

What About the Financial Aspects? 

Many have highlighted that the financial aspects can’t be ignored. For example, Prof Nicola Ranger, General Secretary of the Royal College of Nursing, has said (in an RCN Press Release, 2023) that any future plans will require “new investment” to be successful and that, “Digital transformation is not just about technology; it’s about investing in people and processes to make it work effectively.” 

Efficiency Gains 

With figures in mind, as highlighted earlier, key examples of the efficiency savings that the proposed Data Use and Access Bill could bring by streamlining data use across sectors (especially in healthcare and law enforcement) include: 

– An estimated £10 billion boost to the economy (UK government), primarily through simplifying data access and by reducing administrative inefficiencies and fostering innovation across sectors. 

– Saving NHS staff 140,000 hours by standardising data formats across NHS trusts, hospitals, and GPs. This saved time could then be redirected to patient care, improving treatment speed and accessibility for patients. 

– Automation of routine data tasks, such as logging access to personal data in police databases, could free up 1.5 million hours annually for the police. This reduction in administrative tasks could allow more time for frontline work, which could strengthen law enforcement efficiency and public safety. 

Balancing Efficiency and Privacy 

The implications of the Data Use and Access Bill extend beyond immediate efficiency gains. By fostering a more data-driven approach, the UK hopes to position itself as a leader in the global digital economy. The government asserts that modernising data laws will not only improve public services but also attract investment and innovation in sectors like artificial intelligence and biotechnology. 

Public Trust Needed 

However, the success of this ambitious agenda hinges on public trust. Past experiences with data initiatives, such as the failed Care.data programme in 2016, have left a legacy of scepticism. That programme sought to share GP records for research and planning but was abandoned due to public outcry over privacy concerns. 

As Prof Sir Nigel Shadbolt, co-founder of the Open Data Institute, has said: “Data can be a powerful tool for good, but only if handled responsibly. Building and maintaining public trust is essential for any data initiative to succeed.” 

Government Says Data Will Be Protected 

In response to these challenges, the government has pledged to implement strict data protection measures. The bill is expected to outline clear guidelines on consent, data minimisation, and purpose limitation. Additionally, there will be provisions for individuals to access, correct, or delete their data, aligning with principles established under GDPR. 

However, critics argue that replacing or modifying GDPR protections could weaken individual rights. The Information Commissioner’s Office (ICO), the UK’s data protection authority, has urged caution. In a statement last year, the ICO said, “Any changes to data protection laws must not dilute the rights of individuals or reduce the accountability of organisations.” 

There is also the matter of international scrutiny to consider. As the UK diverges from EU data regulations, questions are being asked about the adequacy decisions that currently allow for the free flow of data between the UK and EU countries. Losing this status could have significant repercussions for businesses operating across borders. 

Looking Ahead 

The Data Use and Access Bill represents a significant step towards modernising the UK’s data infrastructure. While the potential benefits in terms of efficiency, economic growth, and improved public services are substantial, it seems clear that they must be carefully balanced against the imperative to protect individual privacy and maintain public trust. The coming months will be crucial as the bill progresses through Parliament and the national conversation unfolds. 

What Does This Mean For Your Business? 

As the Data Use and Access Bill stands poised for implementation, it signals a transformation across public services, private enterprise, and individual rights. For the government, this legislation offers a pathway to harness data as a tool for national progress. The projected £10 billion economic boost, alongside potential time savings within the NHS and police forces, embodies the bill’s intent to streamline services, foster efficiency, and support sectors such as artificial intelligence and biotechnology. For the government, success means creating a framework where data is a secure, accessible resource that fuels growth, with implications not only domestically but also in terms of the UK’s reputation on the international stage. 

For the public, the stakes are particularly high. On one hand, individuals stand to benefit from improved public services, from faster healthcare diagnoses and treatments to enhanced law enforcement capabilities. But this convenience comes with concerns around privacy, choice, and transparency. Past data initiatives like Care.data have shown that public trust can falter without robust consent frameworks and clear assurances on data security. Therefore, establishing transparency and giving individuals genuine control over their information are pivotal if the public is to feel safeguarded rather than surveilled. 

In healthcare, the NHS’s anticipated transformation via digital records and patient passports could make a tangible difference in patient care given the estimation that it could free up over 140,000 hours in staff time to improve responsiveness and patient outcomes. However, this potential relies on more than just technical feasibility. For example, some would say that significant investment in staff training and infrastructure, as well as strict privacy protocols, are needed to prevent data misuse. Partnerships with private tech companies, which bring efficiency but sometimes questionable records on transparency, will need to be tightly regulated to ensure that patient data is handled responsibly and ethically. 

The police, meanwhile, are expected to gain valuable hours through automation, potentially redirecting 1.5 million hours away from administrative duties to active police work, which many would welcome. However, without careful oversight, automated data access could risk privacy rights and lead to unintentional overreach, a concern for civil liberties advocates who call for accountability mechanisms to match this increased efficiency. 

Third-party companies, particularly in tech, are also significant stakeholders in this bill. The opportunity to innovate and participate in data-driven public projects is substantial, yet comes with the responsibility to uphold rigorous privacy standards. For UK businesses, especially those relying on cross-border data flows, alignment with international data regulations will be critical. Divergence from GDPR raises questions about future adequacy agreements with the EU, impacting data-dependent enterprises if this alignment weakens. 

As this ambitious bill moves forward, its success depends not only on the economic and operational benefits it promises but also its commitment to protecting individual rights and maintaining public trust. Establishing transparent, secure data frameworks that place privacy and consent at the forefront will be essential. With appropriate safeguards, the Data Use and Access Bill could indeed lead the UK into a new era of responsible data innovation. Without them, however, it risks compromising the very rights it aims to modernise.

The post Featured Article : How New Data Laws Will Affect You appeared first on Mear Technology.

Why? 

In their report about their research, the two Harvard students, AnhPhu Nguyen and Caine Ardayfio, said their goal was “to demonstrate the current capabilities of smart glasses, face search engines, LLMs, and public databases, raising awareness that extracting someone’s home address and other personal details from just their face on the street is possible today”. 

Turning Glasses Into Facial Recognition Tools 

As part of a project they called I-XRAY, the students developed a program that demonstrates the potential privacy risks of using AI with smart glasses like Meta’s Ray-Ban models.  

Using their experimental system, the students have reported that they can stream live recordings from Meta’s Ray-Ban smart glasses (which are equipped with camera) to a computer, where AI is then used to spot when the glasses are looking at a face. Next, they are able to use AI and facial recognition tools, notably the PimEyes facial search engine while live streaming video from the glasses to Instagram, to positively identify strangers to whom the faces in the video belong.  

Once the glasses detect a person’s face, the program can pull up images and publicly available personal information, including names, addresses, and more, within minutes. 

The experiment shows how it’s possible to quickly access personal details of random individuals simply by walking past them and capturing their faces on camera, highlighting how invasive and dangerous this technology could become, if misused. 

What Is PimEyes and How Can They Use It? 

PimEyes is a facial recognition search engine that allows users to upload an image of a face and find other images of that person across the web. It scans public databases, websites, and social media platforms to match facial features, making it possible to track someone’s online presence. In their experiment, the Harvard students used PimEyes to identify people in real-time by integrating it with Meta’s Ray-Ban smart glasses. As the glasses recorded video, PimEyes was used to find additional images and public information about individuals whose faces were captured. 

Leveraged Today’s LLMs 

The students said that what makes their I-XRAY system so unique is that it operates entirely automatically, thanks to the recent progress in AI Large Language Models (LLMs). The system leverages the ability of LLMs to understand, process, and compile huge amounts of information from diverse sources, inferring relationships between online sources, such as linking a name from one article to another, and logically parsing a person’s identity and personal details through text. The students said that is this “synergy between LLMs and reverse face search” that “allows for fully automatic and comprehensive data extraction that was previously not possible with traditional methods alone”.  

Used ‘FastPeopleSearch’ To Get Other Personal Details From Names 

Worryingly, the students reported how their system (once they get an LLM-extracted name) can use a ‘FastPeopleSearch’ lookup to identify the person’s home address, phone number, plus their relatives. FastPeopleSearch is a free online tool that allows users to find personal information about individuals, such as addresses, phone numbers, and even family members or associates. It aggregates publicly available data from various sources to offer these details. 

To use it, you go to the FastPeopleSearch.com website (if access is allowed – the website is using a security service – you may need a VPN), enter a person’s name, phone number, or address, and the tool will search its database to return matching results. It’s often used for background checks, though it raises privacy concerns due to the accessibility of personal information. 

Doesn’t Have To Be Smart Glasses 

The students have highlighted that although Meta’s smart glasses have been used in their experiments, using their system, the same results could be achieved using just a simple phone camera. This means that anyone could use this technology to identify, track, or access personal information about strangers in real time, without their knowledge or consent. This raises serious privacy and security concerns, especially regarding stalking, harassment, or ‘doxxing’. 

Are We Ready For This? 

As one of the student researchers in this experiment, AnhPhu Nguyen, said in an ‘X’ post about their findings, “Are we ready for a world where our data is exposed at a glance?”, with others commenting “Fascinating but Dystopian” and “looks like some govt entity will try and get hold of this”. 

How Can You Protect Yourself? 

Despite demonstrating how easily facial recognition systems can be built using publicly available technologies and data, the Harvard researchers have also provided steps to help individuals protect their privacy – helpful links to do this can be found here. They explained how people can remove their data from major facial recognition and people search engines like PimEyes and FastPeopleSearch. Both PimEyes and Facecheck.id offer free services to opt-out, while major people search engines like FastPeopleSearch, CheckThem, and Instant Checkmate allow users to remove their information. Also, considering the potential financial havoc if a person’s US social security number (SSN) is leaked/part of a data dump, the researchers have recommended freezing credit and using two-factor authentication to prevent identity theft. 

What Has Meta Said? 

Meta has reportedly said that the students’ experiment appears to involve them “simply using publicly-available facial recognition software on a computer that would work with photos taken on any camera, phone or recording device”, and has highlighted that its smart glasses are designed to comply with privacy laws, such as including a visible light to indicate when they are recording. 

What Does This Mean For Your Business? 

This could be an important experiment in that it highlights just how vulnerable personal data can be in the age of advanced AI and facial recognition technology. While Nguyen and Ardayfio’s research shows the remarkable capabilities of current technologies, it also serves as a wake-up call to the broader public. The ease with which private details, such as names and addresses, can be extracted from something as simple as a passing glance on the street is a stark reminder of the privacy risks we face. The fact that these tools can be used not just with specialised smart glasses, but also with everyday devices like smartphones, makes the issue even more pressing. 

For businesses, this raises important questions about the ethical and legal responsibilities of companies developing and deploying similar technologies. As facial recognition becomes more ubiquitous, organisations must navigate the fine line between innovation and privacy, ensuring that they not only comply with existing laws but also proactively address the potential misuse of their products. Meta’s response that their smart glasses are compliant with privacy regulations is likely to do very little to quell the growing concerns about how easily such technologies can be repurposed for invasive uses. 

Looking ahead, as the use of AI and facial recognition continues to expand, so too will the need for stricter regulations and public awareness. Individuals, businesses, and governments alike must engage in a broader conversation about the balance between technological advancement and personal privacy to ensure that such powerful tools are not misused.

The post Featured Article : Face-Recognition & Personal Data Concerns appeared first on Mear Technology.