Your Face Is Legal to Steal in 29 States

Full Episode Transcript

In twenty-nine states right now, there's no law stopping a company from scraping your face off the internet and selling it. Not a stranger taking your photo. A business building a profile from photos you already posted. And whether that's legal depends entirely on which state you happen to live in.

Trusted by Investigators Worldwide

Run Forensic-Grade Comparisons in Seconds

Court-ready facial comparison reports. Results in seconds.

Get Started

7-day refund guarantee**

If you've ever posted a selfie, this story is about

If you've ever posted a selfie, this story is about your face. Because the United States has no single national law on facial recognition. Congress hasn't passed one. So the states are doing it themselves — one at a time, with wildly different rules. This year alone, a string of states added new protections. Others still have nothing on the books. So the real question becomes — does your privacy now depend on your zip code?

Start with the map. According to a report from the Center for European Policy Analysis, only eighteen states have a statewide facial recognition law. Three more have one pending. And twenty-nine states have nothing at all. That's more than half the country with no statewide rules on who can use your face. Same technology. Same risk. Completely different protection depending on where you stand.

Now look at who's actually passing these laws. You might expect this to split down party lines. It doesn't. According to reporting from U.S. News and World Report, the states moving ahead this year include Colorado, Connecticut, Idaho, Iowa, Nebraska, and Oregon. Some led by Republicans. Some led by Democrats. Florida Governor Ron DeSantis put it bluntly — the federal government isn't acting, so the states have to. When red and blue states agree on a privacy rule, that tells you something.

The fights are getting specific, too. States are now writing rules on how chatbots talk to children. On how employers use A.I. to screen workers. On what a developer has to do to prevent an A.I. disaster. And on the piece that matters most for your face — the mass scraping of biometric data. Biometric just means the parts of you that are uniquely yours. Your face. Your fingerprint. Your voice. Roughly two dozen states have now passed or expanded laws to restrict that scraping. But the rules don't match. Some require your consent. Some let you personally sue. Others barely enforce anything.

The Bottom Line

For investigators who use facial comparison tools, this changes the whole job. There's no single rulebook anymore. Compliance now means checking all fifty states. Some demand a log of consent. Others require an audit trail of every search. And for the rest of us, it means the same face-matching tool can be perfectly legal in one state and a lawsuit in the next.

The federal government says this patchwork kills innovation. President Trump argued that A.I. companies can't survive needing fifty different approvals from fifty different states. But the bill to fill that gap drew nearly unanimous support — members of his own party crossing the aisle to act. The fragmentation everyone complains about? It exists precisely because Washington chose not to.

So here's where we are. America has no national law on facial recognition. More than half the states have no law either. So whether a company can grab your face and sell it comes down to a line on a map. Whether you run investigations for a living or just unlock your phone with your face — your protection now has a zip code. The full story's in the description if you want the deep dive.

Your Face Is Legal to Steal in 29 States