In view of the recent use of deepfake technology in cybercrime, the Taipei City Government's Department of Legal Affairs held a discussion inviting experts from various fields to discuss the management and monitoring of the use of facial recognition in the public sector.
It has recently come to the attention of the public that the misuse of the deepfake technology and facial recognition can seriously infringe upon people's personal information, following the case of internet influencer Hsiao Yu producing and profiting off of deceitful pornographic videos. Taipei City Government's Department of Legal Affairs held a discussion inviting experts from various fields to discuss how to monitor the use of facial recognition in the public sector.
Weng Kuo-yen, Lawyer: “The Personal Data Protection Act provides a legal basis and sets legal boundaries on how government agencies can use and manage citizens' personal information. Government agencies should obtain consent from citizens before they use their information and citizens have the right to request agencies at any time to stop using their personal information. It's all clearly stated in the Personal Data Protection Act.”
Chou Kuan-ju, Coordinator, Taiwan Association for Human Rights: “People should be aware of whether their personal information and photos from household registration records are being shared with other agencies and being misused.”
Civil groups said companies, schools, and public agencies in Taiwan have been using facial recognition for entrance permissions and attendance systems since 2006. Needless to say, fingerprint and facial recognition are often used for criminal investigations as well. Facial recognition is even combined with body temperature measures since the arrival of the pandemic. However, most people have no idea how a huge load of information can be used.
Wang Jen-fu, Director, Cybersecurity Technology Institute: “We should come up with a comprehensive framework of data protection rights before we try to fix cybercrime. The authorities’ intention may be to prevent cybercrime, but the Criminal Investigation Bureau and the Justice Investigation Bureau would be chasing tails since data collection creates more gateways for cybercriminals to carry out cyberattacks while the police try to diminish the crime.”
One cyber security expert said large-scale personal data collection violates privacy and other fundamental rights of citizens as the risk of criminal groups misusing personal information from facial recognition is high. Policymakers must assess the possible trade-offs in data utilization and make sure that they are implemented with full transparency and accountability.