# United Arab Emirates - Facial recognition for public payments
UAE, 2021 | Severity: N2

## What Happened
In 2021, the UAE government launched a pilot program implementing real-time facial recognition for public transportation payments, allowing commuters to pay their fares simply by walking past cameras. While praised for convenience, privacy advocates and human rights organizations raised concerns regarding the mandatory nature of the biometric capture, the integration of payment data with state surveillance networks, and the lack of transparent legal recourse for misidentifications.

## How MEG 1 acted
The biometric payment system represents a high-risk cognitive and informational tracking vector. Under MEG 1, mass real-time biometric tracking without explicit, uncoerced consent violates informational sovereignty and public safety.

## MEG 2 Analysis - Legal Framework
* **Agent level:** N2 (management) - public transit and biometric payment system operated by a public authority; medium-high impact on data privacy and fundamental rights.
* **Cause (6.1):**
  * **(a) system defect** - design of a biometric payment system that integrates consumer financial data with general surveillance databases without explicit, proportional limits (design defect).
* **Attachment of liability:** The public transit authority as the operator is liable for deploying an unvalidated, invasive system; the technology provider is liable for design flaws regarding data isolation (6.1a).

## Procedural Mechanism
* **6.2 (architectural human confirmation):** Biometric payments and identification actions must require strict, independent confirmation. The system must be architecturally configured to isolate payment processing from state surveillance databases.
* **7.1 (independent forensics):** All access logs to the biometric payment database must be recorded in an unalterable, independent ledger to prevent unauthorized access or searches.
* **9.4 (least privilege):** The payment system's integration with public surveillance databases violates the principle of least necessary access.