Automated face search compares faces to find matching photographs. It can save time, but it works on biometric information, which is sensitive. Before adopting it, ask how accurate it is, where the data goes, whether guests choose to take part, how long data is kept and what legal advice you have received. A simple manual alternative is often enough.
At a large event, hundreds or thousands of photographs may be taken. Guests want to find their own. A face search seems the perfect answer. It is also the kind of feature that deserves a slow look before you switch it on.
This guide belongs to our overview of event photography privacy, permission and image use. It explains questions to ask and does not claim that any feature is available. We confirm what we provide in writing. For sport-specific distribution, see the relevant event guides.
What is the feature doing?
Automated face search turns a face into a numerical pattern, then compares that pattern with patterns from the gallery. The guest may upload a selfie, and the system returns pictures that appear to match.
That is biometric processing. The data derived from a face is more sensitive than a name or an email address, because a face cannot be changed like a password.
What does Malaysian law say?
Malaysia's Personal Data Protection Act 2010 was amended in 2024, with changes in force in stages during 2025. The amendments add biometric data to the category of sensitive personal data. The Personal Data Protection Department publishes the current text and guidance.
We do not interpret the law. Ask a qualified adviser whether and how it affects your event, particularly if guests are asked to supply selfies or if the system stores face data.
Questions to ask the provider
| Question | What a good answer includes |
|---|---|
| Where is face data processed and stored? | A clear location and operator |
| How long is it kept? | A fixed, short period |
| Who can access it? | A limited, named group |
| Is it used for anything else? | A plain no, or a clear explanation |
| Can a guest ask for deletion? | A simple, working process |
| How accurate is it? | Honest limits, not a promise of perfection |
Our guide on cloud galleries and cross-border photo-data handling covers the storage side. If the provider is an automated photo-distribution service, read privacy questions before using an automated photo-distribution service.
Accuracy and fairness
Matching systems make mistakes. They may miss a guest, or show a stranger's photograph in someone's results. Performance can differ with lighting, angle, masks, glasses and many other things. You cannot assume it works equally well for everyone.
Ask the provider what testing it has done, and run your own test with sample images before the day. Treat results as suggestions, and offer a way to report a wrong match.
Choice for guests
Some guests will not want their face scanned. Give them a real alternative. Options include browsing by session, by table, by time or by a printed card with a code. Do not make a face scan the only way to see one's own pictures.
Tell guests plainly what happens. Our guest photography communication builder helps you write a short notice.
A worked example
For example, a conference with 800 delegates considers a face-search feature so delegates can find their photographs. The organiser asks the provider the questions above. The answers on retention are vague, so the organiser decides against the feature.
Instead, the photographer groups images by session and day, and delegates browse a private gallery with a password. A small number who cannot find their photograph write to the organiser, who asks the photographer to look. It takes a little more effort and carries far less risk.
Do minors and sensitive guests change things?
Yes. A face search at an event with children is a much heavier decision, and authorised adults would need to be involved. At events where guests have reasons to avoid being found, such as support groups, do not use it. A name-free manual route respects those guests.
Is it worth it?
For many events, a well-organised gallery is enough. Face search adds value mainly at very large events where browsing is impractical. Weigh the benefit against the handling and permission questions.
Check delivery too
Whatever route you choose, check the final set against your opt-out list. Our photo delivery acceptance checklist helps, and our photo sharing and privacy plan records the choices.
Checklist
- Decide whether guests really need a search feature.
- Offer a manual alternative that needs no face scan.
- Ask the provider how data is stored, used and deleted.
- Tell guests clearly what happens and let them opt out.
- Ask a qualified adviser about biometric data.
- Test the feature on sample images before the event.
Tell us whether guests need to find their own photographs and how many are expected. We will confirm in writing what we provide, and suggest a simpler route where one will do.
Discuss how guests find photosCommon questions
How does automated face search work?
A system measures features of a face in a guest's selfie and compares them with faces in the gallery. It then shows likely matches. The method and the data kept differ between services, so ask each provider.
Is facial data sensitive?
Biometric data can be treated as sensitive personal data. Malaysia's data protection law was amended in 2024, and the changes include provisions on biometric data. Ask a qualified adviser what applies to your event.
Is it accurate?
Not perfectly. Matching can miss people or show wrong matches, and results vary with lighting, angles and masks. Treat results as suggestions, and give guests a way to report errors.
Do guests have to take part?
They should have a real choice. Offer a manual route such as browsing by session or table, and do not require a face scan to see one's own photographs.
What happens to the face data afterwards?
Ask the provider whether it is stored, for how long and who can access it. Agree deletion in writing. Do not accept vague answers.
Sources checked
Discuss how guests find photos
Tell us whether guests need to find their own photographs and how many are expected. We will confirm in writing what we provide, and suggest a simpler route where one will do.
What happens next: You send your event details on WhatsApp. Our team reads the brief, asks what is missing, then confirms in writing whether the date, venue and coverage can be booked, with a quotation. Opening WhatsApp does not send anything, and a message is not a booking until both sides confirm.
Last reviewed: