Mexican Government Plans Nationwide Biometric Data Collection Using AI Systems

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Mexico's government is planning to acquire AI-powered biometric software to collect and process fingerprints, facial, and iris data from all citizens, linking it to the national population registry. While aiming to combat identity theft and fraud, this large-scale data collection raises significant privacy and misuse risks.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves the development and intended use of AI-enabled biometric processing software by the government for identity verification. However, there is no indication that any harm has yet occurred or that a specific incident involving harm has taken place. The description focuses on the planned acquisition and deployment of AI-based biometric tools, which could plausibly lead to future harms such as privacy violations, misuse of biometric data, or identity-related harms if not properly managed. Therefore, this qualifies as an AI Hazard due to the plausible future risk associated with the deployment of AI biometric systems at scale, but not an AI Incident since no harm has been reported yet.[AI generated]
AI principles
Privacy & data governanceRespect of human rightsTransparency & explainabilityDemocracy & human autonomyAccountability

Industries
Government, security, and defenceDigital security

Affected stakeholders
General public

Harm types
Human or fundamental rightsPublic interest

Severity
AI hazard

AI system task:
Recognition/object detection


Articles about this incident or hazard

Thumbnail Image

Peligra la identidad de unos 117 millones de mexicanos

2020-01-02
Periódico AM
Why's our monitor labelling this an incident or hazard?
The article involves an AI system (biometric recognition software) whose use is being planned to address existing identity theft harms. Since the AI system is not yet deployed and no harm has resulted from its use or malfunction, this event does not qualify as an AI Incident. It also does not describe a plausible future harm caused by the AI system itself, but rather discusses potential operational risks unrelated to AI malfunction or misuse. Therefore, it is best classified as Complementary Information, providing context on government plans and challenges related to AI deployment for identity management.
Thumbnail Image

4T quiere datos biométricos de todos los mexicanos

2020-01-02
San Luis Potosí
Why's our monitor labelling this an incident or hazard?
The article explicitly involves AI systems in the form of biometric identification software and data processing infrastructure. The harms described (identity theft, fraud) are existing societal problems that the AI system aims to mitigate, not harms caused by the AI system itself. The event is about the planned acquisition and deployment of AI-enabled biometric systems, not about an incident or malfunction causing harm, nor about a plausible future harm from the AI system's development or use. The article also discusses risks that could impede the project but does not describe any realized or imminent harm from the AI system. Thus, it fits the definition of Complementary Information, providing background and context on AI deployment and governance related to biometric identity management in Mexico.
Thumbnail Image

CURP podría incluir información biométrica de los mexicanos: Segob

2020-01-02
Radio Fórmula
Why's our monitor labelling this an incident or hazard?
The event involves the development and intended use of AI-enabled biometric processing software by the government for identity verification. However, there is no indication that any harm has yet occurred or that a specific incident involving harm has taken place. The description focuses on the planned acquisition and deployment of AI-based biometric tools, which could plausibly lead to future harms such as privacy violations, misuse of biometric data, or identity-related harms if not properly managed. Therefore, this qualifies as an AI Hazard due to the plausible future risk associated with the deployment of AI biometric systems at scale, but not an AI Incident since no harm has been reported yet.
Thumbnail Image

El gobierno de México quiere registrar los datos biométricos de todo el país

2020-01-02
Unocero
Why's our monitor labelling this an incident or hazard?
The event involves the use of AI systems for biometric recognition and identity verification, which are explicitly mentioned. While no direct harm is reported as having occurred yet, the large-scale collection and centralization of sensitive biometric data pose credible risks of identity theft, privacy violations, and potential misuse, which could lead to violations of human rights and harm to individuals. Therefore, this event represents a plausible future risk of harm stemming from the AI system's use, qualifying it as an AI Hazard rather than an Incident, since no realized harm is described yet.
Thumbnail Image

Se requiere datos biométricos de todos los mexicanos: Segob

2020-01-03
Noticias Oaxaca Voz e Imagen
Why's our monitor labelling this an incident or hazard?
The article explicitly involves AI systems in biometric data processing and identification. However, it does not report any direct or indirect harm caused by the AI system's development, use, or malfunction. Instead, it discusses ongoing harms from identity theft and fraud that the AI system aims to mitigate. The article also outlines potential risks that could hinder the project but does not describe any realized harm or plausible imminent harm caused by the AI system itself. Thus, it fits the definition of Complementary Information, providing detailed context on AI deployment and its societal implications without reporting a new AI Incident or Hazard.
Thumbnail Image

Busca Segob obtener información biométrica de todos los mexicanos

2020-01-02
www.xeu.mx
Why's our monitor labelling this an incident or hazard?
The software described involves biometric data processing, which typically uses AI systems for recognition and matching. The event concerns the development and use of such AI systems to manage sensitive personal data. However, the article does not report any realized harm or incident resulting from this AI system's use or malfunction. Instead, it highlights the potential to address identity theft and fraud issues. Since no direct or indirect harm has occurred yet, but the deployment of such AI systems could plausibly lead to incidents related to privacy, data security, or misuse, this qualifies as an AI Hazard rather than an AI Incident. There is no indication that this is merely complementary information or unrelated news.