Walk into a store, board a flight, log into your bank, or scroll through social media, and chances are you may be asked to scan your face. Facial recognition and other face-based biometric technologies are becoming increasingly common forms of identification.

The technology promises speed, convenience, and security – yet it also raises serious concerns over privacy. Major retailers such as Kmart have been found using facial recognition without customer consent, sparking regulatory backlash.

"So are we seeing a dangerous technological overreach or the future of security?" asks Orlando. "And what does it mean for families, especially when even children are expected to prove their identity with nothing more than their face?"

The two sides of facial recognition

Facial recognition technology is often marketed as the ultimate convenience. Airlines like Qantas highlight it as the key to a smoother travel experience – no more fumbling for passports or boarding passes, just scan your face and move along.

But the picture changes when consent is ignored. "When big retailers such as Kmart and Bunnings were found to be scanning customers' faces without permission, regulators stepped in and the backlash was swift," Orlando notes.

The situation becomes even more complicated for children. New legislation may see social media platforms implementing face-based age verification to keep kids safe online. Schools are also trialling facial recognition for classroom entry and cafeteria payments.

Yet risks remain. Microsoft, for example, was accused of mishandling children’s biometric data. For children, facial recognition is quietly becoming the default, despite very real dangers.

Facial recognition works by mapping unique facial features and comparing them to a database of stored images. Unlike passive CCTV cameras, it doesn’t just record – it actively identifies and categorises people.

"This may feel similar to earlier identity technologies, like the QR code check-ins that appeared during the COVID pandemic," Orlando says. "However, there is a crucial difference: where a QR code can be deleted, your face cannot."

Why this matters

Permanence is the core issue. Once a facial scan is stored, it can remain in databases indefinitely. If hackers gain access, that identity is compromised. In an increasingly digital world where banks and tech platforms may rely on facial recognition, the stakes are high.

Errors are another concern. Misidentification is real, and age-estimating systems are often inaccurate. "One 17-year-old might easily be classified as a child, while another passes as an adult," Orlando notes. Such mistakes can restrict access or misplace individuals in the wrong digital spaces.

These risks are not hypothetical. Being wrongly placed on a watchlist could lead to repeated delays and interrogations while traveling. Stolen facial data could be exploited for identity theft, giving criminals access to personal accounts.

In the future, facial recognition could even influence insurance or loan approvals, as algorithms draw conclusions from a person’s face or video.

Despite these concerns, there are benefits: law enforcement can identify suspects quickly in crowds, and secure access to areas can be streamlined.

"For children, however, the risks of misuse and error stretch across a lifetime," Orlando warns.

Facial recognition may carry more risks than rewards. "In a world rife with scams and hacks, we can replace a stolen passport or driver’s license, but we can’t change our face," Orlando notes.

The key question is where to draw the line between reckless implementation and mandatory use. Security and convenience are important, but they aren’t the only values at stake.

"Until robust, enforceable rules around safety, privacy, and fairness are firmly established, we should proceed with caution," Orlando concludes.