Moving Goalposts: Football, Facial Recognition and the Expansion of Surveillance

Football in the UK is a central part of social and cultural life. Stadiums are sites of entertainment, community meeting points and places for fans to express themsleves. Decisions made in a sporting context carry significance beyond football itself.

Facial recognition technology (FRT) and other biometric systems are increasingly being introduced into sporting environments worldwide. These deployments are often framed as improving efficiency or security, but they raise larger questions about privacy, accountability and the normalisation of surveillance in everyday life.

Our latest report, ‘Moving Goalposts: Facial Recognition Technology in football and beyond’ examines how FRT is being used in sport across different jurisdictions, and what this means for football in the UK. The report finds that, while contexts vary, similar patterns emerge: limited transparency, weak consent and a tendency for systems introduced for narrow purposes to expand over time.

Shifting parameters

Biometric systems are often introduced in sport as operational tools. In North America, for example, facial recognition has been deployed to streamline entry into stadiums. Systems such as Major League Baseball’s “Go-Ahead Entry” allow fans to enrol their facial image in advance and enter venues without presenting a ticket.

Although these systems are presented as voluntary and privacy-preserving, their deployment creates new data infrastructures that can be repurposed. Concerns have been raised about the potential for data access through legal processes, as well as the broader risks associated with collecting biometric identifiers - our faces - at scale.

At an event at Madison Square Gardens, FRT was reportedly used to identify and exclude individuals associated with legal action against the venue. Entry decisions were made without prior notice or a clear mechanism for challenge. This reflects the shift in which systems introduced for access management can be used to regulate participation in opaque ways.

European deployments

In Europe, several football clubs have trialled biometric systems for access control and the identification of banned supporters. These include deployments by Valencia CF, Atlético Osasuna and FC Metz. In each case, data protection authorities intervened.

Regulators in Spain and France concluded that these systems didn’t meet the requirements of necessity and proportionality under European GDPR. In particular, they found that less intrusive alternatives, such as digital ticketing, were available and effective. Consent was also deemed insufficient where participation pressures and information asymmetries undermined its validity.

These decisions placed significant constraints on the use of FRT in stadium contexts. However, they have not resolved the issue entirely. Some clubs have challenged enforcement actions, and broader policy developments have created new avenues for deployment.

In France, legislation adopted in the context of the Paris 2024 Olympics authorised the use of AI-enabled video surveillance in public spaces. Although framed as a temporary measure, it has been extended, raising concerns about the long-term entrenchment of surveillance systems introduced under exceptional circumstances.

At the EU level, the AI Act places limits on the use of biometric identification, including restrictions on live FRT in public spaces. However, implementation remains ongoing, and questions persist regarding enforcement capacity and the consistency of application across member states.

UK Deployments

In the UK, the use of facial recognition in football contexts has been driven primarily by police forces rather than clubs.

South Wales Police deployed live FRT at football matches, including high-profile fixtures. At the 2017 Champions League final in Cardiff, the system generated over 2,000 false matches. Although not all of these resulted in further action, the scale of inaccuracy raised significant concerns about reliability and proportionality.

The Court of Appeal subsequently ruled in R (Bridges) v South Wales Police that aspects of the deployment were unlawful, citing deficiencies in safeguards, including watchlist governance and equality impact assessments. Despite this, police forces have continued to use the technology under revised policies.

In London, the Met Police deployed live FRT around a Premier League match between Arsenal and Tottenham in 2023. The deployment extended beyond the stadium itself into surrounding public areas, including public transport. This reflects the shift in which sports are used as justification for wider surveillance activity.

We submitted Freedom of Information requests as part of this report, and what we received back indicate there is limited transparency around how FRT is used in football contexts. Police forces were unable to provide clear data on the number of deployments linked to matches, the outcomes of those deployments or their relationship to football banning orders. In some cases, this was attributed to the structure of internal data systems.

This lack of record keeping has implications for accountability. Where data is not collected or cannot be analysed, it becomes difficult to assess effectiveness, identify errors or evaluate whether deployments are proportionate to their stated aims.

Global expansion

Outside Europe, approaches to FRT in sport vary significantly.

In Brazil, legislation now mandates the use of FRT for entry into large stadiums. These systems are integrated into broader security infrastructures, and their use is mandatory for attendees. While authorities have cited operational benefits, regulators have raised concerns about transparency and compliance with data protection principles.

In the MENA region, surveillance technologies have been deployed at scale in the context of major sporting events such as the World Cup and the African Cup of Nations. These systems often extend beyond stadiums into wider urban environments. Civil society organisations have raised concerns about the lack of safeguards and the potential for long-term entrenchment.

Despite these differences, a common pattern can be observed. Sporting venues are used as initial deployment sites, after which systems expand into surrounding areas and other domains.

Normalisation and infrastructure

The significance of FRT in sport lies not only in individual deployments, but in its cumulative effect.

Stadiums provide conditions that are conducive to the introduction of such technologies: large volumes of people behaving in a predictable way, controlled entry points and a strong incentive to manage flows efficiently. These characteristics make them attractive environments for testing and refining surveillance systems.

Once deployed, these systems tend to become embedded in infrastructure. The initial investment in cameras, networks, data storage and operational processes creates an incentive to expand usage. Over time, systems introduced for specific purposes may support additional functions, including crowd analytics and law enforcement integration.

At the same time, repeated exposure can alter expectations. As FRT become part of routine experiences in novel ways such as sport, they may be perceived as a standard feature rather than an exceptional measure. This process of normalisation reduces the likelihood of scrutiny and increases the ease with which systems can be extended into other areas of life.

Implications for football in the UK

To date, the UK Premier League have not adopted FRT systems for routine stadium operations. This appears to reflect a combination of legal uncertainty, infrastructure considerations and sensitivity to supporter concerns.

Football in the UK is closely linked to community identity and collective expression. Stadiums have historically functioned as spaces for protest and mobilisation.

The introduction of FRT into this context therefore has implications beyond operational efficiency. It raises questions about the conditions under which people participate in public life and the extent to which monitoring becomes embedded in cultural spaces.

The existence of less intrusive alternatives is also relevant. Digital ticketing, contactless systems and steward-led verification already provide effective means of managing access and security. In regulatory terms, the availability of such alternatives outweighs the necessity of biometric systems.

Conclusion

The expansion of FRT in sport reflects broader developments in the use of surveillance technologies in public spaces. While individual deployments may be framed as limited or beneficial, their cumulative effect is to normalise and embed biometric monitoring within everyday activities.

Football provides a particularly significant context in which to consider these developments. As a widely attended and socially meaningful activity, it has the potential to shape expectations about the acceptability of surveillance.

The current position of the Premier League, in which FRT has not been widely adopted, offers an opportunity to consider these issues before systems become entrenched.

Decisions taken in this context will influence not only the future of football, but also the broader relationship between technology, governance and public spaces.

The stakes are high.