A regulation aiming to standardize the use of facial recognition technology and protect personal data wasunveiled on Friday, as the increasingly wider application of the security-related tech sparks growing concerns over potential privacy violations in China.

周五，一项规范人脸识别技术的使用和保护个人数据的新规出台，随着这种与安全相关的技术的应用范围不断扩大，引起了公众对潜在隐私侵犯行为的日益关注。

The regulation jointly issued by the Cyberspace Administration of China and the Ministry of Public Security, will come into effect on June 1. It clarifies that the use of the technology should abide by the law, and must not harm national security, public welfare and the legal interests of individuals.

该条例由中国网络空间管理局和公安部联合发布，将于6月1日生效。规定明确，使用人脸识别技术应当遵守法律，不得损害国家安全、社会公共利益和个人合法权益。

Facial recognition technology needs to be used when it is necessary, and should be used in a way that imposes the least intrusion on personal rights and interests, it states, adding that data collected through the technology must be strictly protected.

文件指出，人脸识别技术应在必要时使用，且应遵循对个人权益侵害最小的使用方式，并补充规定，通过该技术收集的数据必须受到严格保护。

Before applying the technology, one is required to inform individuals whose facial data will be collected in a clear manner and using easy-to-understand language that is "truthful, accurate and complete" concerning a variety of matters.

在应用该技术前，应当以清晰易懂的方式向面部数据采集对象履行告知义务，确保告知内容真实、准确、完整，并全面涵盖相关事项。

Such matters include the data collectors' names and contact information, the reason for collecting such data, how the data will be processed and how long the data will be preserved, the regulation stated.

法规明确，相关事项应包括数据收集方名称及联系方式、收集事由、数据处理方式及保存期限等核心要素。

Neither organizations nor individuals are allowed to verify people's identities through facial recognition technology by misleading, dishonest or coercive tactics, nor may they install facial recognition equipment in private spaces, such as hotel rooms, bathhouses, changing rooms and restrooms, it said.

文件明确规定，任何组织或个人既不得采用误导、欺诈或胁迫等不正当手段通过人脸识别技术验证个人身份，亦不得在酒店客房、浴室、更衣室、卫生间等非公开场所安装人脸识别设备。

The regulation also calls for the application of measures such as data encryption, security auditing, access control and intrusion detection to protect the collected facial recognition information.

该法规同时要求落实数据加密、安全审计、访问控制及入侵检测等技术手段，以加强所采集人脸识别信息的防护。

In addition, occasions where the information is processed for the purpose of research and development of facial recognition technology and algorithm training are not subject to the regulation.

此外，出于人脸识别技术研发及算法训练目的处理信息的场景，不适用本规定。

"Facial content is sensitive personal information, which, once leaked, will easily impose major harm on the safety of people and their property, and even threaten public security," the administration said. It added that the regulation has made it clear that facial recognition technology must not be the only method used when other methods of identity verification are available and sufficient for achieving the same purpose.

网信办强调："面部特征属敏感个人信息，一旦泄露容易对人身和财产安全造成重大危害，甚至威胁公共安全。"文件同时明确，当其他身份验证方式足以实现相同目的时，不得将人脸识别作为唯一验证手段。

People who do not agree to undergo facial recognition should be provided with alternative reasonable and convenient verification methods, the administration said. It pointed out that these stipulations target in particular the abuse of facial recognition technology during hotel check-ins and entrances to residential compounds.

对于不同意使用人脸识别的个人，应当提供其他合理便捷的验证方式。相关规定特别针对酒店入住、居民小区出入等场景中滥用人脸识别技术的行为作出规范。

Facial recognition technology

n.人脸识别技术

Facial content

n.面部特征

Undergo

v. 经历，经受；忍受

Public security

n.公共安全

Identity verification

n.身份验证