Reason.com - Free Minds and Free Markets
Reason logo Reason logo
  • Latest
  • Magazine
    • Current Issue
    • Archives
    • Subscribe
    • Crossword
  • Video
  • Podcasts
    • All Shows
    • The Reason Roundtable
    • The Reason Interview With Nick Gillespie
    • The Soho Forum Debates
    • Just Asking Questions
    • The Best of Reason Magazine
    • Why We Can't Have Nice Things
  • Volokh
  • Newsletters
  • Donate
    • Donate Online
    • Donate Crypto
    • Ways To Give To Reason Foundation
    • Torchbearer Society
    • Planned Giving
  • Subscribe
    • Reason Plus Subscription
    • Print Subscription
    • Gift Subscriptions
    • Subscriber Support

Login Form

Create new account
Forgot password

Surveillance

NFL's Facial Recognition Technology Sparks Fears of Fan Surveillance

Personal data retained by government or private entities are always at risk of compromise, misuse, or access by law enforcement.

Patrick Eddington | 8.15.2024 12:15 PM

Share on FacebookShare on XShare on RedditShare by emailPrint friendly versionCopy page URL
Media Contact & Reprint Requests
Highlighted figures stand in front of a football field | Illustration: Lex Villena; adapted from Mkopka, Dreamstime, Mvogel
(Illustration: Lex Villena; adapted from Mkopka, Dreamstime, Mvogel)

Earlier this month, a viral post on X claimed that the NFL would start using facial recognition technology (FRT) "to verify the identity of people entering [each] stadium." According to the rumor, the league had partnered with Wicket, a facial recognition software company, and would soon begin its fan surveillance program.

Wicket's chief operating officer, Jeff Boehm, told Reason in a statement that the company's FRT technology was being used to verify the identity of "credential holders seeking access to restricted areas of the stadium, not for ticket holders."

Boehm went on to say there were "no US Government agencies or departments currently utilizing Wicket in an operational role." He acknowledged that "Wicket has not made our source code available to any third parties."

Despite Boehm's assurances, video surveillance of fans—even if done by a private company—could be cause for concern. Once Wicket collects the data, where do they go? Who can access them?

Technology has become virtually synonymous with convenience. But what might seem convenient for an iPhone user—the ability to unlock your phone with a fingerprint or your face—can also be used by law enforcement in some jurisdictions to force you to unlock your phone against your will. This kind of scenario represents a direct threat to our Fourth and Fifth Amendment rights.

But police also have another way of getting your digital data, whether biometric or otherwise: They can buy them. With no federal legislation currently banning this practice, law enforcement agencies are always seeking out new sources of personal data on Americans they can buy and store for future use.

While Wicket is a participant in the Face Recognition Technology Evaluation program through the National Institute of Standards and Technology, Boehm's response means that Wicket's FRT and related encryption code have not been subjected to an independent audit for accuracy and security.

Avoiding independent audits is becoming increasingly difficult for most commercial tech companies. Major FRT vendors like Microsoft, IBM, Amazon, and Google have had their FRT failures publicly exposed, heightening concerns about this technology.

NFL Communications Director Tim Schlittner told Reason, "The NFL performed testing/trialing of Wicket to ensure its capability and accuracy. Our cybersecurity team also conducted a vendor risk assessment to ensure the technology met all of our requirements."

Yet neither its testing nor cybersecurity risk assessment of Wicket's system has been made public by the NFL.

If FRT technology advances to the point where it can correctly identify a person with 100 percent certainty—regardless of race, facial type and features, gender, or any other factors that have the potential to return false positives or false negatives—it could usher in a revolution in facility and critical systems security.

Imagine scenarios where airliner aircrews, ground crews, maintenance personnel, food vendors, and others who work at airports are required to undergo FRT as a measure against threats. Similarly, on military bases, both uniformed and civilian personnel, along with their spouses, might be required to submit to FRT for the same reason.

While technological perfection may not yet be possible, it is important to remember that regardless of the well-intentioned reasons FRT advocates provide, personal data held by government or private entities are forever at risk of compromise, misuse, or access by law enforcement.

Regarding whether the NFL shares data from information technology systems other than Wicket with law enforcement entities, Schlittner cited the NFL's existing privacy policy for its shop.

That policy currently allows for the sharing of user login and password information, precise geolocation data, and racial or ethnic information with law enforcement "as required by law or legal process," as well as "to anticipate, prevent, detect, and investigate suspected fraud, harassment, or other violations of any law, rule, or regulation" for "legal, security, or safety purposes."

The NFL will also sell that very same kind of data to law enforcement, according to the policy. For now, biometric data collected by the NFL—specifically "a scan of your facial geometry used to verify your identity"—are not up for grabs to the highest bidder. The concern, of course, is that given the incentives to monetize such data, NFL customers and fans would be well-advised to periodically check the NFL's privacy policy page for any changes.

There's no question that enactment of the Fourth Amendment Is Not For Sale Act (which passed the House 219–199 in April) would restore a proper constitutional "no probable cause, no warrant" standard for law enforcement access to commercially stored data. Yet even if the bill became law, it does nothing to preclude the "garbage in, garbage out" problem associated with inaccurate FRT scans or other biometric data.

It was a botched fingerprint analysis by the FBI 20 years ago that nearly sent innocent Oregon lawyer Brandon Mayfield to prison for years on bogus terrorism charges. More recently, false positive police FRT scans have led to personal and professional disaster for several people. According to the American Civil Liberties Union, "in nearly every one of those instances, the person wrongfully arrested was Black."

To prevent those kinds of errors and abuse, Congress should pass legislation mandating that FRT or any other biometric technology alone cannot be the sole basis for an arrest, as well as requiring mandatory periodic database audits to purge questionable or demonstrably false biometric data from federal law enforcement databases. It's the kind of criminal justice reform that should be a high priority when the 119th Congress convenes in January 2025.

Start your day with Reason. Get a daily brief of the most important stories and trends every weekday morning when you subscribe to Reason Roundup.

This field is for validation purposes and should be left unchanged.

NEXT: Carving Out a Tax Cut Just for Tips Doesn't Make More Sense When Kamala Harris Does It

Patrick Eddington is a former CIA analyst and House senior policy advisor, and is a senior fellow in homeland security and civil liberties at the Cato Institute.

SurveillanceCivil LibertiesPrivacyFootballFacial RecognitionFourth AmendmentLaw & Government
Share on FacebookShare on XShare on RedditShare by emailPrint friendly versionCopy page URL
Media Contact & Reprint Requests

Show Comments (23)

Latest

A Federal Court Just Blocked Trump's Tariffs

Eric Boehm | 5.28.2025 7:50 PM

Can Schools Ban This 'There Are Only Two Genders' Shirt? Supreme Court Declines To Hear Free Speech Case

Billy Binion | 5.28.2025 5:21 PM

RFK Jr. Denigrates Privately Funded Medical Research

Joe Lancaster | 5.28.2025 3:55 PM

Can Trump Yank Harvard's Remaining Federal Funding?

Emma Camp | 5.28.2025 3:30 PM

A Federal Judge Lists 8 Ways That Trump Violated the Constitution by Punishing a Disfavored Law Firm

Jacob Sullum | 5.28.2025 3:15 PM

Recommended

  • About
  • Browse Topics
  • Events
  • Staff
  • Jobs
  • Donate
  • Advertise
  • Subscribe
  • Contact
  • Media
  • Shop
  • Amazon
Reason Facebook@reason on XReason InstagramReason TikTokReason YoutubeApple PodcastsReason on FlipboardReason RSS

© 2024 Reason Foundation | Accessibility | Privacy Policy | Terms Of Use

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

r

Do you care about free minds and free markets? Sign up to get the biggest stories from Reason in your inbox every afternoon.

This field is for validation purposes and should be left unchanged.

This modal will close in 10

Reason Plus

Special Offer!

  • Full digital edition access
  • No ads
  • Commenting privileges

Just $25 per year

Join Today!