ACLU Obtains Documents Showing Amazon Is Handing Out Cheap Facial Recognition Tech To Law Enforcement
from the Prime-membership-not-required dept
More bad news on the privacy front, thanks to one of America's largest corporations. Documents obtained by the ACLU show Amazon is arming law enforcement agencies with cheap facial recognition tech, allowing them to compare any footage obtained from a variety of sources to uploaded mugshot databases.
The company has developed a powerful and dangerous new facial recognition system and is actively helping governments deploy it. Amazon calls the service “Rekognition.”
Marketing materials and documents obtained by ACLU affiliates in three states reveal a product that can be readily used to violate civil liberties and civil rights. Powered by artificial intelligence, Rekognition can identify, track, and analyze people in real time and recognize up to 100 people in a single image. It can quickly scan information it collects against databases featuring tens of millions of faces, according to Amazon.
It's already been deployed to several areas around the country, with Amazon acting as the government's best friend a la AT&T historic proactive cooperation with NSA surveillance efforts. The documents [PDF] obtained by the ACLU show Amazon has been congratulated by local law enforcement officials for a "first-of-its-kind public-private partnership," thanks to its deployment efforts. On top of providing deployment assistance, Amazon also offers troubleshooting and "best practices" for officers using the tech. It has even offered free consulting to agencies expressing an interest in Rekognition.
These efforts aren't surprising in and of themselves, although Amazon's complicity in erecting a law enforcement surveillance structure certainly is. Amazon is looking to capture an underserved market, and the more proactive it is, the more market it will secure before competitors arrive. To further cement its position in the marketplace, Amazon is limiting what law enforcement agencies can say about these public-private partnerships.
In the records, Amazon also solicits feedback and ideas for “potential enhancements” to Rekognition’s capabilities for governments. Washington County even signed a non-disclosure agreement created by Amazon to get “insight into the Rekognition roadmap” and provide additional feedback about the product. The county later cited this NDA to justify withholding documents in response to the ACLU’s public records request.
Documents also suggest Amazon is looking to partner with body camera manufacturers to add its facial recognition tech. This is something body camera manufacturers are already considering, and licensing an established product is far easier than building one from the ground up.
The system is powerful and can apparently pull faces from real-time footage to compare to databases. It also allows agencies to track individuals. It puts passive cameras on surveillance steroids, giving any person who strolls past a government camera a chance to be mistaken for a wanted suspect. To date, facial recognition software has managed to generate high numbers of false positives, while only producing a handful of valid arrests.
These efforts have been deployed with zero input from the largest stakeholder in any government operation: the general public.
Because of Rekognition’s capacity for abuse, we asked Washington County and Orlando for any records showing that their communities had been provided an opportunity to discuss the service before its acquisition. We also asked them about rules governing how the powerful surveillance system could be used and ensuring rights would be protected. Neither locality identified such records.
It may be the NDAs discourage public discussion, but more likely the agencies acquiring the tech knew the public wouldn't be pleased with having their faces photographed, tracked, stored indefinitely, and compared to pictures stored in law enforcement databases. And if public agencies are unwilling to discuss these programs with the public, they're far less likely to create internal policies governing use of the tech. Amazon's push to secure a sizable portion of this market is only making things worse, and its use of NDAs is going to further distance these public agencies from being accountable to the people they serve.
Thank you for reading this Techdirt post. With so many things competing for everyone’s attention these days, we really appreciate you giving us your time. We work hard every day to put quality content out there for our community.
Techdirt is one of the few remaining truly independent media outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis.
While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.
–The Techdirt Team
Filed Under: face recognition, law enforcement, police, privacy, rekognition, surveillance
Companies: aclu, amazon
Reader Comments
Subscribe: RSS
View by: Time | Thread
[ link to this | view in thread ]
BOLO
[BOLO] Be on the lookout for links between facial recognition and cell phone location technology.
Think about a system to compare a surveillance photo against drivers license photos. The official id photos would be selected by their correlation with the cell phone numbers active in the vicinity of the surveillance camera.
[ link to this | view in thread ]
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
At this point it really should be illegal...
...for a government agent of any kind to sign an NDA.
Any NDA signed by a federal or state agent should be null and void, and maybe a fine should be imposed on the signing official.
Also treason should be added to their rapsheet.
It's not like that will become law anytime soon, but it should be.
[ link to this | view in thread ]
Too bad they don't also sell a spell checker.
Maybe Amazon Prime subscribers are excluded from the database, and this is all just to sell more subscriptions?
[ link to this | view in thread ]
Re: Re:
[ link to this | view in thread ]
[ link to this | view in thread ]
Introductory price
[ link to this | view in thread ]
Re: Re: Re:
Otherwise large stores such as Sears, Walmart, Vons/Pavilions and Costco would be subject to anti-Trust legislation, simply for existing.
There is nothing monopolistic about this, simply because they are big and have large cash flows.
There are valid privacy concerns here, but not monopolistic ones, from what I can see.
[ link to this | view in thread ]
Re: At this point it really should be illegal...
Please stop using that word; I don't think it means what you think it means.
Unless you think it means this:
"Treason against the United States, shall consist only in levying War against them, or in adhering to their Enemies, giving them Aid and Comfort."
So Civil War is treason, violent overthrow of the government is treason, and possibly joining e.g. ISIS is treason, but little else is.
[ link to this | view in thread ]
CIA: Collect It All
Last chance! Campaign ends at midnight! Get your copy of the CIA's declassified training game by backing CIA: Collect It All on Kickstarter.
https://www.kickstarter.com/projects/mmasnick/cia-collect-it-all
[ link to this | view in thread ]
If I am out in public, I am out in public. Any police officer can see me, and they or any member of the public can duplicate this with a cell phone, because that is part of a definition of a public place.
I don't see an inherent capacity for abuse of this. (Can someone inform me of the privacy issues with this?). Sure it can be used to track people, but it isn't necessary for that (and we track people all the time, currently).
It could be used by police to harass people, but, as evidenced by current events, its by no means necessary.
Now, certainly, if the cameras running this are secreted away in a private space, then yes this facial identification would be problematic. But the overwhelming problem is the initial invasion of privacy, not the multiplier of facial recognition.
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
Re:
You...generally don't want to use a common word as a brand name in the twenty-first century. Calling it "Recognition" would be a great way to make sure nobody could find it in a Google search.
[ link to this | view in thread ]
Re: At this point it really should be illegal...
Agreed on the first half(no NDA's for government contracts that allow them to stonewall courts/people trying to find out what they're doing), disagree on the second(definition of treason).
As the AC pointed out, 'treason' is already well defined, and I personally do not trust that it would remain even remotely constrained if someone tried to come along and 'update' it.
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
Alexa, why are you watching me?
[ link to this | view in thread ]
Treason
Fair enough, though promising not to tell the people what you're doing as a state official seems to be antagonistic to service of and for the people.
That smacks strongly of levying war against the people of the US or adhering to their enemies, or giving them aid or comfort.
[ link to this | view in thread ]
I don't even know where to start to actually meaningfully oppose this. While I'm outraged, I'm also scared.
[ link to this | view in thread ]
Despair
There are some interesting directions this can go.
~ The courts or legislators may decide that knowing where you are all the time is too much information for law enforcement to have without a warrant.
~ We may learn as we have before that too many faces look alike, that facial recognition has a propensity for false positives, in which case a match may never be a positive identification or probable cause.
~ The more mischievous of us may develop ways to inconspicuously alter our faces to either disguise who we are, or even convince the algorithms we're someone else specifically, as per adversarial inputs against other pattern recognition systems.
~ Facial recognition may go public, so that anyone can download an open-source facial recognition program and its accompanying database of millions, then law enforcement officers who are indiscriminately brutal are murderous can be tracked for the public to watch.
[ link to this | view in thread ]
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
Re: Re: At this point it really should be illegal...
Does this constrain the government in any real way? They can define crimes and set the penalties; is the only restriction that they can't use the word "treason"?
[ link to this | view in thread ]
Re: Re:
Although it's kind of the same problem but applied to a matter of law rather than data science.
[ link to this | view in thread ]
Re:
Intruder Alert! - Intruder Alert!
after hacker accesses your network via the IOT doorbell.
[ link to this | view in thread ]
Re:
[ link to this | view in thread ]
Re: Re: Re:
I don't know that it's any more generic than Windows.
[ link to this | view in thread ]
And is this part of the business model for Echo devices?
[ link to this | view in thread ]
Multiple Sensor Inputs [was Re: ]
In an era of big data, it doesn't take someone skilled in the art to expect intelligent systems to cross-correlate inputs from multiple sensor platforms.
[ link to this | view in thread ]
[ link to this | view in thread ]
Where's a get out of jail free card when you need one?
https://www.alamy.com/stock-photo-1930s-1940s-1950s-press-photographer-man-holding-speed-graphi c-camera-47245301.html
If you fail to wear your "innocent" pass in public after your first false arrest, you can be charged with "impersonating a criminal" and "inciting false arrest." The fine will cover the cost of chasing you down plus a small processing fee to the red-light camera company that handles the facial recognition contract.
We'll have a whole class of citizens called "look-alikes". People will design QR codes into fashionable hats, ball caps, lapel jewelry, and windshield stickers. You can run an "innocent" app on your phone in case the cameras catch your face but not your pass.
At dinner parties, look-alikes will be asked who they resemble. "Oh, I saw the police sketch from 1992--I'm a dead ringer for some rum-runner from Hazzard County, Georgia who drives a '69 Dodge Charger, if you can believe that. He's still at large--or maybe he's dead by now."
I expect this to hit China first. Tying your social credit score to all your friends' social credit scores leads to cascade effects if popular celebrity WeChat feeds are compromised to criticize the State. Tens of thousands of followers get "downgraded" by association--to the point where they are banned from train travel. Victims are milling around train stations waiting for the error to be resoled when the system identifies them as vagrants for being stationary for an hour. Hackers add fake crimes, now police respond. The police have been added to the list of criminal faces. Taser-laden drones appear. The more "efficient" the system is, the more dangerous it becomes due to predictability and lack of human judgement.
[ link to this | view in thread ]
How about that tech at every storefront.
So the minute someone (or one of their doppelgangers) buys a Starbucks coffee, the baristas know he's a wanted felon.
Then they'll have cause to dial 911.
[ link to this | view in thread ]