社区人脸识别信息收集的法律风险分析

Legal Risk Analysis of Community Face Recognition Information Collection

摘要: 人脸识别信息因具有唯一性、可携带性、易于采集性，在被技术开发后广泛用于各种场景中。根据《民法典》以及《个人信息保护法》的规定，人脸信息属于生物识别信息，同时也属于敏感个人信息。“人脸识别第一案”暴露出非必要收集人脸识别信息存在的法律风险。新冠疫情爆发后，许多住宅社区都引入人脸识别门禁系统，作为人们日常生活的中心，社区对于住户的个人信息收集十分容易，但仅凭物业公司的技术水平，能否妥善保护用户信息防泄露是存疑的。现有学者多从商业领域，如APP用户人脸信息收集、AI换脸技术等方面探究人脸识别的风险，跟个人隐私密切相关的社区人脸信息收集却鲜少探究。因此，本文旨在通过阐述目前社区收集人脸信息存在的住户敏感性偏低、社区以便利管理为导向的现状，在“合法性、正当性、必要性”的敏感个人信息处理三原则的基础上，探究其在法律以及实际应用层面的合理规制途径。

Abstract: Face recognition information is widely used in various scenes after technology development because of its uniqueness, portability and easy collection. According to the provisions of the Civil Code and the Personal Information Protection Law, face information is biometric information and is also sensitive personal information. The “First Case of Face Recognition” exposed the legal risks of unnecessary collection of face recognition information. After the outbreak of the new coronavirus, many residential communities have introduced face recognition access control system, as the center of people’s daily life, the community is very easy to collect personal information for residents, but only by the technical level of the property company, whether the user information can be properly protected against leakage is doubtful. Existing scholars mostly explore the risks of face recognition from commercial fields, such as APP user face information collection, AI face-changing technology, etc., but rarely explore the community face information collection closely related to personal privacy. Therefore, this paper aims to explore reasonable regulatory approaches at the legal and practical application levels based on the three principles of “legality, legitimacy and necessity”, by explaining the current situation of the low household sensitivity and the convenience-oriented management of community in collecting face information.