Your Kid's Face, Stored 14 Years — To Save 5 Minutes at Roll Call

A kid in Paraná, Brazil, walks into homeroom. She doesn't say "here." She doesn't raise her hand. A camera looks at her face, matches it against a database, and marks her present — all before she sits down. That happened every school day, in more than 1,700 public schools, to roughly a million kids at once. Then Brazil's privacy regulator looked at the whole setup and said: stop.

Here's the part that should stop you mid-scroll: this wasn't some experimental pilot in one classroom. It was standard operating procedure across an entire state, running since 2023, on kids as young as five or six who have zero power to say "actually, I'd rather you didn't scan my face, thanks."

Why "Just Attendance" Was Never Just Attendance

Let's be honest about what schools were actually asking for. Not a headshot for a yearbook. Not a badge you can swap out. They wanted a permanent, mathematical map of a child's face, stored on a server, checked every single school day, for as long as that kid stays enrolled. Brazil's regulator did the math on that and didn't like the number: the data could sit on file for the equivalent of 14 years. Fourteen years is longer than most marriages last. It's long enough for a five-year-old to graduate high school with the exact same face-file still sitting somewhere, waiting to be hacked, sold, subpoenaed, or just quietly forgotten about by an IT department that changed hands three times. This article is part of a series — start with You Can Change Your Password You Cant Change Your Face And 3.

And here's the thing that really got me: the regulator didn't say "this technology is bad" or "cameras in schools are evil." They said something much narrower and much sharper — that saving teachers a few minutes on roll call doesn't clear the bar for handing over a child's permanent biological identity.

"Convenience based on practicality is not sufficient" to justify collecting biometric data under Brazilian law, the regulator found — concluding the facial recognition system was "unnecessary and disproportionate" when less invasive options exist, "even if they require an old fashioned roll call." — Brazil's ANPD, as reported by Biometric Update

That last line is doing a lot of work. Roll call. The thing teachers have done since forever, with a clipboard and a pen. The regulator basically said: yes, that's slower, and yes, we're fine with slower, because a slightly longer homeroom is a much smaller price than a permanent copy of your kid's face sitting in a database that outlives the school year, the school district, and possibly the vendor who built it.

The Consent Problem Nobody Wants to Say Out Loud

Here's where the regulator's reasoning gets genuinely interesting, and honestly, kind of brave. Schools love to say parents "agreed" to the face-scan system. But agreed how? You get a form home in a backpack, buried under a field trip permission slip and a book fair flyer, and you're supposed to weigh the biometric privacy implications for your child's next fourteen years in the ninety seconds before dinner? That's not consent. That's paperwork. Previously in this series: Europe Built The Age Check That Doesnt Steal Your Id Nobody .

Brazil's regulator called this out directly, describing the relationship between a school system and its students as one of real imbalance — kids can't push back on a school the way an adult can push back on, say, a bank asking for a fingerprint. A student doesn't get to negotiate. They show up, or they get marked absent, or worse, flagged. The regulator framed the whole rollout as one-sided — a school deciding, on its own, what happens to a child's biological data, with the child (and often the parent) never really in the room when the decision got made.

That third point deserves its own paragraph, because it wrecks the entire sales pitch. The whole justification for scanning a million kids' faces a day was efficiency — free up the teacher, speed up the morning. Paraná even pointed to an OECD study claiming Brazilian teachers lose roughly a third of class time to non-teaching tasks, framing automation as the fix. But if the automated system is actually slower than a teacher just calling names off a list — and misidentifies kids while it's at it — then the entire trade-off collapses. You didn't gain efficiency. You just added a permanent biometric record to a system that still needed a human to fix its mistakes.

One Thing You Can Actually Check

If you've ever gotten a notice from your kid's school about a "new check-in system" and felt a small, nagging unease you couldn't quite name — that's the instinct worth trusting. It's the same instinct behind every question people ask about whether a photo, a profile, or an identity online is really what it claims to be. The tools built to answer that kind of question exist because faces, once digitized, travel in ways paper never did. Up next: Playstation Age Verification R18 Privacy.

So here's the one concrete thing to do, before any system gets rolled out at your kid's school: ask for the data retention policy in writing. Not a verbal reassurance from the front office — an actual written answer to how long the face data is stored, who outside the school can access it (a vendor? a state database? law enforcement?), and whether there's a non-biometric opt-out that doesn't quietly disadvantage kids who use it. If the school can't produce a straight answer to those three questions in one sitting, that tells you almost everything you need to know about how carefully this was thought through.

If your child's school proposed face-scan attendance tomorrow, would you even know what to ask? Most parents wouldn't, and that's not a knock on parents — it's a design flaw in how these systems get introduced, quietly, as an upgrade rather than a decision. Brazil just proved a regulator can slam the brakes on a system already running in a million classrooms a day. The next test is whether it takes an investigative reporter and a legislature moving in four days to do it again somewhere else, or whether parents start asking the retention question before the cameras ever get installed.