A surveillance camera in San Francisco, which recently banned police from using facial-recognition software. (Justin Sullivan/Getty Images)
Agents with the Federal Bureau of Investigation and Immigration and Customs Enforcement have turned state driver’s license databases into a facial-recognition gold mine, scanning through hundreds of millions of Americans’ photos without their knowledge or consent, newly released documents show.
Thousands of facial-recognition requests, internal documents and emails over the past five years, obtained through public-records requests by Georgetown Law researchers and provided to The Washington Post, reveal that federal investigators have turned state Department of Motor Vehicles databases into the bedrock of an unprecedented surveillance infrastructure.
Police have long had access to fingerprints, DNA and other “biometric data” taken from criminal suspects. But the DMV records contain the photos of a vast majority of a state’s residents, most of whom have never been charged with a crime.
Neither Congress nor state legislatures have authorized the development of such a system, and growing numbers of Democratic and Republican lawmakers are criticizing the technology as a dangerous, pervasive and error-prone surveillance tool.
“Law enforcement’s access of state databases,” particularly DMV databases, is “often done in the shadows with no consent,” House Oversight Committee Chairman Elijah E. Cummings (D-Md.) said in a statement to The Post.
Rep. Jim Jordan (Ohio), the House Oversight Committee’s ranking Republican, seemed particularly incensed during a hearing into the technology last month at the use of driver’s license photos in federal facial-recognition searches without the approval of state legislators or individual license holders.
“They’ve just given access to that to the FBI,” he said. “No individual signed off on that when they renewed their driver’s license, got their driver’s licenses. They didn’t sign any waiver saying, ‘Oh, it’s okay to turn my information, my photo, over to the FBI.’ No elected officials voted for that to happen.”
Despite those doubts, federal investigators have turned facial recognition into a routine investigative tool. Since 2011, the FBI has logged more than 390,000 facial-recognition searches of federal and local databases, including state DMV databases, the Government Accountability Office said last month, and the records show that federal investigators have forged daily working relationships with DMV officials. In Utah, FBI and ICE agents logged more than 1,000 facial-recognition searches between 2015 and 2017, the records show. Names and other details are hidden, though dozens of the searches are marked as having returned a “possible match.”
San Francisco and Somerville, Mass., have banned their police and public agencies from using facial-recognition software, citing concerns about governmental overreach and a breach of public trust, and the subject is being hotly debated in Washington. On Wednesday, officials with the Transportation Security Administration, Customs and Border Protection and the Secret Service are expected to testify at a hearing of the House Committee on Homeland Security about their agencies’ use of the technology.
The records show the technology already is tightly woven into the fabric of modern law enforcement. They detailed the regular use of facial recognition to track down suspects in low-level crimes, including cashing a stolen check and petty theft. And searches are often executed with nothing more formal than an email from a federal agent to a local contact, the records show.
“It’s really a surveillance-first, ask-permission-later system,” said Jake Laperruque, a senior counsel at the watchdog group Project on Government Oversight. “People think this is something coming way off in the future, but these [facial-recognition] searches are happening very frequently today. The FBI alone does 4,000 searches every month, and a lot of them go through state DMVs.”
The records also underscore the conflicts between the laws of some states and the federal push to find and deport undocumented immigrants. Though Utah, Vermont and Washington allow undocumented immigrants to obtain full driver’s licenses or more-limited permits known as driving privilege cards, ICE agents have run facial-recognition searches on those DMV databases.
More than a dozen states, including New York, as well as the District of Columbia, allow undocumented immigrants to drive legally with full licenses or driving privilege cards, as long as they submit proof of in-state residency and pass the states’ driving-proficiency tests.
Lawmakers in Florida, Texas and other states have introduced bills this year that would extend driving privileges to undocumented immigrants. Some of those states already allow the FBI to scan driver’s license photos, while others, such as Florida and New York, are negotiating with the FBI over access, according to the GAO.
“The state has told [undocumented immigrants], has encouraged them, to submit that information. To me, it’s an insane breach of trust to then turn around and allow ICE access to that,” said Clare Garvie, a senior associate with Georgetown Law’s Center on Privacy and Technology who led the research. . . .