This is not an argument against regulation. Bans on live surveillance in public spaces are worth fighting for, and the people fighting for them are on the right side. It is an argument against a habit of mind: treating facial recognition as one giant, untouchable thing, when part of it is a set of commercial products with opt-out forms that work today.
Where the myth comes from
Take a widely shared explainer from the civil-liberties group Liberties, “Facial Recognition Privacy Concerns”. It walks through insecure databases, biased algorithms, wrongful arrests, protest surveillance and the chilling effect on speech, and it does so fairly. Then it turns to what a reader should do, and the list is: support regulatory frameworks, demand better security from institutions, be aware that data is collected invisibly, back a campaign for a ban.
Nothing on that list is wrong. But notice what is missing. There is no step that starts with “open this page and fill in this form.” The reader finishes informed and stationary. Multiply that by every article written in the same shape over the past five years and you get a public that is worried, well read, and convinced the only lever is political.
That belief has a cost. While people wait, the consumer face-search engines have kept crawling, and the number of photos those engines hold of each of us has only grown. The myth is not that regulation matters. The myth is that regulation is the only thing that matters.
Two problems hiding behind one word
“Facial recognition” covers two very different things, and the advice for each is different.
The first is surveillance: cameras in public space, police watchlists, government identity systems. You did not upload anything, you cannot see the database, and there is no form. This is the part that genuinely needs law, because the only lever is collective. Most writing on the subject, including the Liberties piece, is really about this.
The second is search: commercial engines that crawl the public web, turn every face they find into a searchable record, and sell the ability to look you up. PimEyes, FaceCheck.ID, Lenso.ai, EyeMatch.AI and others. This is the part that touches ordinary people most directly, because it is the one a stranger, an ex, a recruiter or a scammer can actually use. And it is the part with opt-out processes, because these are companies operating under privacy law, not police forces.
What you can do this week
Five things, in the order that pays off fastest. None require a lawyer.
1. Find out where you actually appear
Before filing anything, look. Most of the consumer engines let you run a search and see blurred results without paying. Doing this once tells you which engines have you, roughly how many photos, and which ones are the surprises. We wrote a ten-minute walkthrough: audit your own face exposure.
2. File opt-outs with the engines that have them
Every major consumer face-search engine has a removal or opt-out process. They differ in what they ask for, usually one or two clear reference photos and sometimes an identity document, and in how long they take, from days to weeks. Our guides for PimEyes, FaceCheck.ID, Lenso.ai and Clearview AI cover the forms step by step, including the mistakes that get requests rejected.
3. Use the law that applies to you
The forms work because behind them sits a legal right, and which right depends on where you live. In the EU and UK, the GDPR gives you a right to erasure and treats face data as a special category. In California, the CCPA lets you demand deletion and opt out of sharing. In Illinois, BIPA requires consent before a faceprint is collected at all, and several other US states have followed with their own biometric or consumer privacy laws. You do not need to cite the statute to fill in a form, but knowing which one covers you tells you how much weight your request carries. Our rights overview lays this out by jurisdiction.
4. Close the sources you control
Engines can only index what is public. The old dating profile, the forum avatar from years ago, the photo-sharing account you forgot, the public album a friend tagged you in: these are the clean, frontal reference images that make matching everything else easy. Removing or locking them will not un-index you, but it starves the next crawl. Seven places your face may be that you never uploaded it to is the checklist.
5. Put it on the calendar
This is the step every guide skips and the one that matters most. Engines re-crawl the web continuously. A face removed in spring can be picked up again from a new photo by autumn, and an opt-out that was honoured in March does not cover a record created in September. Removal is not an event. It is maintenance. Decide now that you will re-check every month or two, and re-file where you have reappeared.
What you genuinely cannot do
Honesty cuts both ways, so here is the other side of the ledger. You cannot opt out of a camera on a lamppost. You cannot file a form with a government watchlist you are not allowed to know exists. You cannot make a friend delete a photo, or make a news site take down a picture from a public event. And you cannot guarantee that any engine, having accepted your request, will keep its word or never re-index you. Some say they will not; some are explicit that they will.
Those are the limits, and they are real. They are also exactly the limits the civil-liberties argument is about, and where campaigns for stronger law belong. The point is not that the law is unnecessary. The point is that its absence is not a reason to leave the forms unfilled.
Waiting for the ban is a choice
The Liberties explainer ends by pointing readers to a campaign to ban remote biometric surveillance. Support it. But be clear about what a ban would and would not do. A European ban on live surveillance in public space, if it came, would not reach a face-search company operating from outside the EU, would not delete the records already built, and would not stop a person in another country from paying for a search. Consumer face search will be governed by the erasure and opt-out rights that already exist long before it is governed by any ban.
Which means that, for this half of the problem, waiting is not neutral. Every month between now and whatever law eventually passes, the crawlers run and the indexes grow. Choosing to wait is choosing to be more findable later than you are today. That is a legitimate choice. It should at least be a conscious one.
Where a service fits
Everything in the list above can be done by hand, and for one or two engines it is worth doing yourself at least once, if only to see how the forms work. What most people do not sustain is step five: the re-checking and re-filing, across every engine, every month, indefinitely. That is the chore that turns “I opted out once” back into “nothing I can do.”
That chore is what FacePrivacy is for. We file opt-out and removal requests with the face-search engines we support, on your behalf, under the legal basis your location gives you, and we re-file as necessary as the engines re-crawl. Every request and every reply is logged in your dashboard. We cannot promise any engine’s response and we do not remove photos from the sites that host them. What we do is keep the forms filled, so that the one lever an individual actually has stays pulled.
There is something you can do. Start it today.
FacePrivacy files opt-out and removal requests with the major face-search engines on your behalf and re-files them monthly, so the work does not depend on your calendar.
See how the removal tool works →