Home Office updates legal basis for Immigration Enforcement's live facial recognition

On 29 October 2026 the Home Office updated its document "Immigration Enforcement: live facial recognition legal mandate". It sets out the powers and rules under which Immigration Enforcement (IE), the Home Office unit responsible for enforcing immigration law, uses live facial recognition (LFR). According to the government page, the update reflects the programme moving from a "proof of concept" to a pilot.

What LFR is for IE

The document describes it as an identification tool. During an authorised deployment, cameras compare the faces of people passing through with a pre-approved list of wanted people (a watchlist). The earlier version from February 2026 referred to use at UK ports. It said the aim was mainly to find people who had returned to the UK in breach of a deportation order, or who were wanted in connection with immigration-related offences.

Legal basis

IE relies primarily on its statutory functions and the implied powers under the Immigration Act 1971. It also points to common law, which the High Court found sufficient for police use in the Bridges case against South Wales Police. To compile watchlists, IE uses a provision of the 2021 regulations on the collection and use of biometric information.

The department stresses that the changes improve transparency and do not introduce new enforcement powers. The document itself states that LFR does not create new powers.

Safeguards

• A watchlist must be prepared for a specific deployment, be time-limited and be no broader than necessary. Intelligence alone cannot widen the approved categories of people.
• An alert from the system must be reviewed by trained staff. No action may be based solely on an alert, and it must rest on an existing legal power.
• Biometric data of people who do not trigger an alert is automatically, immediately and permanently deleted.
• When an alert is generated, only the minimum information needed, for example for verification, audit or complaint handling, is kept. Data from false alerts is subject to strict deletion controls.
• The document covers compliance with data protection law, the Human Rights Act 1998 and the Equality Act 2010, as well as joint deployments with police.
• Oversight includes the Information Commissioner's Office and the Biometrics and Surveillance Camera Commissioner.

What this means for you

The document does not change residence rules or give IE new powers. It indicates that watchlists cover strictly defined categories, mainly people subject to deportation orders or wanted in connection with immigration offences. People travelling through places where such a deployment takes place may have their faces scanned. Data of people who do not trigger an alert is meant to be deleted immediately. The Home Office publishes privacy information, and people can request access to their data under data protection law.