Dahua's Skin Color Analytics Risk GDPR Noncompliance
Dahua lists cameras with "skin color" analytics in 3 European countries covered by the GDPR, despite the GDPR banning processing that can reveal a person's race or ethnicity, IPVM has found.
Dahua defends skin color detection as a "basic feature" unrelated to race/ethnicity, but "skin color" can reveal race and thus requires a specific exception under the GDPR, two European data regulators confirmed to IPVM.
However, Dahua has not disclosed any specific GDPR justification for this processing, which is officially considered "sensitive" by the GDPR.
In this post, IPVM examines the GDPR concerns that Dahua's skin color detection cameras raise and what relevant data authorities and the GDPR itself say about such technology.
Dahua's "**** *****" ********* ******* ** * **** *********
***** ******* ****** ** ***** ********* European ********* ******* "**** *****" ********* in ***** **************, ** ************ ********.
*** ** ****** ******* *******, ******* ******** ** ***** ******, *** * ***** ** ****** by ***** ************ ** *** *********** (**************,** ******** *******, *******.**):
*** ***** ********* ***** ************** ** *** ****.
Dahua ****** **** ***** ********* ** ****, *********
* **** **** *******'* ********** **** "**** *****" ** *** targeting *** ******** ****** ** ****** group *** ****** *** ** **** "basic ********** ******** **********", ********** ******* IPVM:
*** ******** ** ******** ** ******** consistent **** *** *********** **not ***** ********* **** ****** *** ****** ******, ****** ** ******** ***** [...] it is a simple mechanism to enable third-party developers to build smart solutions based on certain basic ********** ******** ********** [emphasis added]
***** **** **** "******", "*****", "*****" skin ****** *** ****** "***** ***** categories" ***** ****** ** ******* ** a "************** *******".
How *** **** ******* **** *********
********** ******** **** "********* ****** ** ethnic ******" ** ********** ** *******'* ******* ************** "*********"** **** *** **** *** *** European **********:
*** **** ******** ** ******** ********** to **** ***********. **** ********** ** not ***** ** * ******** ************'* video *********, *** *******, "****** ****** reasons" ** "********** ** ********** ******** purposes".
*** ********* **** ********** ********* **** ** *********(** ******* ****** ***********, ***** ** also **********) ** ******* *(*): "*********** public ********," *.*., ******** *********** ** Facewatch's ****.
***, **** ** **** *********** ** it ********** "*** *********** ****** *** the ********* ** *** **** *******" and ** "************* ** *** *** pursued", ******* * ****.
Two ******** ********** *** **** ***** ******* ** ****
******'* **** *********,****, **** **** **** ******** ******'* "skin *****" ******** * ***** ******* 9 ********* ** ** "******" *** reveal "****** ** ****** *******":
***collection ** **** ******** ** ******'* **** ***** **, in fact, likely to constitute a collection of sensitive data within the meaning of article 9 of the GDPR and of the law "IT and Liberty" law in thatit *** ****** *** ****** ** ****** ******* ** *** ******* *********.
*******, *** *********** ******* *** *more ********** ****** *** **** ****: the processing of sensitive data will therefore imply either that the organization identifies an exception to the principle of prohibition laid down by the texts (for example, the consent provided for in Article 9.2. a of the GDPR) or that a text authorizes the implementation of the system. [emphasis added]
*** ***********' **** *********,*** **, **** **** **** **** * camera ********* **** ***** ***** "*********" racial ** ****** ******, ** ** is ******* ** ******* *:
******* ***** ******* * ** ‘******** data*************** ** ****** ******’. *** **** colour ** ******** **** ***** ******* racial ** ****** ****** ** **** cases. [******** **** **]
** *******, * *** **** *** that ** *** ***********, *** **** rules ***** ** ******** ** *** European ******** ****: *** ****. ******* 9 ** *** **** ******* ** personal **** ********* ****** ** ****** origin. *** ********** ** **** **** is **********, ****** *** ** *** ten ********** ********* ** ******* * applies.
*** ******** ****** **** ********* *** Dahua, ******-***, *** **** *******, *******, ******* IPVM **** "********** **** ******** ********** of *** **** ******* ** *** specific **********."
Dahua ** ********
******* ******** **** ***** ********* ** 3 **** *********, ***** *** *** made ****** ***** ** *** ** clear ******* * ********** ** ****** on ** ******* ********** **** *** reveal ****** ** ****** ******.
**** ***** ***** ******** *****, ******** August *, ***** **** ******* * exception ** ****** **. *******, ***** did *** *******. ** ***** **** respond, **** **** ****** **** ****.
GDPR ********* ********
*** **** ********* ********** **** * maximum **** ** ** ******* ***** ($22.5 *******) ** *% ** ****** annual *******, ********* ** ******, ************ **. *** ****** **** *** ***** surveillance ***** *** ***** $*,***, ********* to ***** **** ********(****** ******* ***** ******* ** $**.**.) ***** **** ** "*********, *************, and **********" *** **** ****.
Tracking ***** **** ****** **********
********* *** *** ** ***** ***** skin ***** ** ******** ******* ********, e.g., *** ****** ******* ***** ***** or ******** **** ****** ****. *** standard ***** *** ***** **** ** called ************** *****, ***** **** *** ****** (***** I ******* ** ** ***** ********):
*** *********** ******* *** *********** ***** being ***** ************ ** ******** ** UV *****, ******* ***** **** ******* light *** *** **** ***** ****** - "*****", "*****", *** "******".
*****'* ******* ******* * ******* ** the *** ** ***** ***** "* major *****" (三大人种) *********** ** ** ********* *** **********-*** ******* ******* ** Sciences: ***** (********), ***** (**********/*********), *** yellow (******).
** *** ** *** ******, ********** began *********** ****** **** ******** '*****' based ** **** ***** ******** ** the **** *******. *******, **** ** now ********* ********** ** **** ************ ******.
Ethics ********
****-******** ******** ******* ******* ******** **** experts **** ****, **************, *** *********, as ******** *****: *** ***** ****** ** ****-********* Software ****** ******** **** ****.
**** ** *** ***** ********* "*** controversial *** *** **** ******* ** China" ** **** ********* ** ******** ********* ************ *****.
****** *** ***, **** ***** ********* are **** ****** *** **** ************** *** ****** *********(********* *** **-******** ** *****.)
***********! * **** *** **** ***** law *** ** ******* **. **** is *********** *********** *** ********** ************** ** ***** (CAC), ** ****** ******:
******* **** ************ ** ********** ***** *** face *********** ********** ** ******* ******** race, *********, ******** ********* ******** *********** such ** *******, ****** ******, ****** class, ***.
第十一条除维护国家安全、公共安全或者为紧急情况下保护自然人生命健康和财产安全所必需，或者取得个人单独同意外，任何组织或者个人不得利用人脸识别技术分析个人种族、民族、宗教信仰、健康状况、社会阶层等敏感个人信息。
*******, **'* *** *** ***** ** me *** ** ***** ****** *** manufacturers *** ********** *** ****** *********. Detecting **** *****, *******, *** **** religion ** ********** ** *** *****, e.g.:
- ********* ****** ***********, ******-*******, **** ** PRC ***** ***********
- ********* ******* ****** ********* *********, *** Covers **
- ********* ******** *** ****** ** ***** Gong, **********, ********
- ***** ******** "****** ********" ** ***** Police
- ***** *** ********* **-****** ****** *** Ethnic *** ****** *********
** ***** ** **** *** *** is ******* *** ****'* ******* * - ***** *** **** ******* ******** about "*********" **** - ******* ***** realizing *** ********** **** ********* *** in *** *** ***********. *** **** is **** ** ******** *****.
* ** ***** ** ** * Italian, ******, ******, ********, *******, *******........***?
**** ** ** ****** ******?
*** ** *** *** *** * dark ***** **** **** ** *** ethnic ******? ******? ** ** ***'*
***** *** ** ******* ********* ** the ******* *** *** *** ***** who *** ***** ******* ** **** of ******* ***** ****** ***** * person ******* **?
*** *** ******* ** ** **********
** ******, ****** *** **** *******.
***'** ***** **** ****** **** "*****" "skin *****" *** ** **** **** different ****** ******. *** ******** *** history ** ****** **** *** **, where *** **** ******* ***** **** strict ***** *********** *** ****** ** people **** "*****" **** *****, ********** of ****** *****. ***** **** **** rules *********** *** ****** ** ****** with "*****" **** ***** *.*. **** on ************ ********** "*****" **** *****.
** **** *** **********, *** *** read *** ******** ** "**** *****" analytics***** ** ******** *** ****, ***** ** *** of *** **' **** ***** ****** organizations.
***** ****** **** **** **** "**** little ****" *** **** **** **** color ********* *** ******** **** "**** practically *********" ****** **************:
Very ****** ******* **** **** ******** ********* **tag ****** ** ***** **** ******* ***** *******, ********** **** ** theUnited ****** ***** ****** ** **** * *** *** **** **** ** *** ******* *** *******. Video analytics already has the potential to lead to more pervasive surveillance; making detection of skin color a part of the toolbox willpractically ********* **** ****** ********************* **** ** ****. *** ******* of "***** *********" ********* ** **** of *** ******* **********’* ************** ** oppression ****** ** * ***** ******** of *** **** ********* ****. [******** added]
*******, *** **' ******** ******** *********** also ****** ******** **** *** ***** discrimination:
***** *** **** ** ******** ** not * *** ******, *** ******* are ********** ** “****** *********, ********** and ***** ** *** ********* ** well ** **** ** ***** ********* that ****** ** **** *********, ********** or *****.” *** ******** ** ******** in ****** ********** **** ** *********** ** ******** **** ******* ** renewing * *** **********. ***availability ** **** ************* ***** ******* *********** *** ** ********** ** ************ ** *** *** ******** ** “****** ** **** *********, ********** ** *****.”***********,identifying ** **********’* ******** **** (** **** ***** *** ***** **** **** ** * ***** *** ****) ******* ***** ******* ** ********** ** ******** **** ******* *** ******** ******* ********.** ***** ******* ** *******, *** further ****** *** ******** ** *** principles ******** ** ****** ******* **** ** ********** ****** **** ******* **** ** ******** for ***** ************. **** ********* ****** *** ********** of ************ *** **************, ***** ***** principles. [******** *****]
*** *******! *** *** **** ***********.
* ****'* **** *** ****** ********* in ***! *** *** ********** ** which ***** ******* *** ****** *** citizens.
****
**** *** **** **** ******** *** laws ***** ******** ** *** ***.
***** ****** ***** *** ***** ****** recognition data - ******* *****
* *****'* **** ******** ** *** actual ****** **** ******* **** **** no ****** ** **** ** ******* and/or ****** *** **********.
**, ** ***** **** **'* * law **** **** ******* ******** ******* civilians **** ********* *** **** ** mainland *****, *** *** * *** that ******** **** *** **********