
Facial recognition technology (FRT) identifies or otherwise recognises a person from a digital facial image. Businesses can use FRT in a variety of contexts - for example, in allowing access to devices, taking payments, or allowing entry to secure areas.
Depending on the use, FRT involves processing personal data, biometric data and special category personal data. Such technologies can intrude on people's privacy, so businesses need to think carefully when deciding if they should implement them.
If you are a small business looking to begin using facial recognition technology, read the ICO's latest FAQ about using FRT for payment, entry, or other security systems.
The information highlights key issues to be aware of, such as:
- what you need to consider before using this technology;
- when you must complete a data protection impact assessment;
- how to identify and satisfy a special category condition; and
- what to include in your privacy notice if you use FRT. See: [Additional considerations for technologies other than CCTV | ICO](https://ico.org.uk/for-organisations/guide-to-data-protection/key-dp-themes/guidance-on-video-surveillance-including-cctv/additional-considerations-for-technologies-other-than-cctv/#frt)

Unregulated Buy Now Pay Later (BNPL) agreements will fall under full FCA regulation from 15 July 2026. For the first time, BNPL lenders will need to meet the same expectations as other consumer-credit providers. With almost 11 million UK adults using BNPL in 2024, according to an FCA survey, this is a significant change.

The government has published the draft secondary legislation for the UK’s Carbon Border Adjustment Mechanism (CBAM), which is due to go live on 1 January 2027. This is an important development for UK businesses importing affected materials.
