No Face, No Entry: Compulsory Face Gates Meet China's Consent Law, The Take Inside China

The last hundred meters home have become a multiple-choice question with one answer: scan your face, or stay outside. As aging residential compounds upgrade their access gates, some are retiring cards and codes and keeping only face recognition — convenient, efficient, and, for the residents flagged in procurators’ cases and a Shenzhen complaint, a compelled trade of biometrics for the right of entry. Our WeChat column’s take ran under the headline “Won’t enroll your face, can’t go home? This gate upgrade is overbearing” (2026-09-05). This entry translates the take with the regulatory record pinned underneath — including the strongest rule the take itself never mentions.

The numbers

• SPP typical cases, released 2026-01-22: property-management face-data leak risks — one Chongqing property-tech company held 1.5 million face records with 10+ risk issues; another firm across 13 estates had four; defects include collecting under-14s’ data without guardian consent and non-local storage of face data (Jiemian via Sina Finance, 2026-01-26)
• Shenzhen, May 2026: HuaFa New City HuaYuan, Bao’an district — face recognition the sole entry method; enrollment required sending family photos to stewards’ personal accounts; Shajing sub-district office verified and pushed rectification: on-site enrollment option plus physical cards for all residents (Nandu via Tencent, 2026-05-16)
• Legal baseline: PIPL (in force 2021-11-01) consent-and-no-refusal clause; SPC 2021 judicial interpretation backing owners’ demand for alternatives; CAC-MPS Face Recognition Safety Rules (issued 2025-03-21, in force 2025-06-01) — Article 10 bans sole face verification where alternatives exist, requires separate consent, withdrawal rights, and on-device storage
• Backdrop: December 2020 — Beijing residents resisting estate face enrollment; multi-province rollouts with “no scan, no entry” reported in Guangdong and Zhejiang (China News Service, 2020-12-29)
• Figure arbitration: the take stages the 2020 standoff in Xi’an; the verifiable reporting (China News Service) places it in Beijing’s Yizhuang and Shijingshan estates — this entry follows the record. The take’s legal anchor is PIPL’s consent clause, which is accurate but generic; the sharper instrument is the 2025 Safety Rules’ Article 10 “no sole verification” rule, which the take does not cite.

The take inside China

The people locked outside. The take opens not with law but with the people the gate fails: residents who refused enrollment and were barred; elderly residents caught between leak anxiety and the simple need to buy groceries with a smooth trip home. Its epigraph is a 2020 resident’s line: “Even when I’m not home, you’d know.”

A face is a password you cannot change. The take’s core image: passwords leak and get rotated; biometrics leak and stay leaked for life. That is why the law — PIPL’s consent clause, the procuratorate’s January cases naming property managers’ storage risks — keeps returning to the same point: the gate may upgrade, but collection has a boundary, and “I decline” must remain a livable answer.

A real choice, not a false one. The take concedes the other side honestly: old compounds have real security burdens, staffing is expensive, and hands-full residents genuinely like not fumbling for a card. Its objection is to the design, not the technology: a good gate lets the fast scan faces and the slow swipe cards. When convenience arrives as compulsion, it has changed into something else — the gate upgraded, and the right to come home downgraded with it.

What the Chinese take left out

The 2025 Safety Rules. The take argues from PIPL’s general consent clause, but China now has a face-specific regulation — in force for over a year — that states the exact principle the take is reaching for: where an alternative achieves the same purpose, face recognition may not be the sole verification method, and objectors must be offered another reasonable way in. It also requires on-device storage with no internet transmission, a direct answer to the leak scenario in the SPP’s Chongqing cases. The take likewise omits that the SPP’s examples are remediation cases — procuratorial recommendations pushing fixes, not fines — which tells readers how this regime actually bites: slowly, administratively, estate by estate. English-language coverage of the Shenzhen rectification was essentially absent at press time.

Why it matters outside

Biometric consent and proportionality is a global fight — GDPR special-category data, Illinois’ BIPA, the EU’s AI Act’s real-time recognition bans — and China now runs one of the most textually specific face-recognition regimes anywhere: no sole verification where alternatives exist, separate consent, mandatory withdrawal, storage on the device. The Shenzhen case is a working demonstration of the whole stack at street level: a resident complaint on a message board, a sub-district office verifying, physical cards ordered back — the state arbitrating between a property manager’s efficiency and a resident’s face. Paired with our earlier entry on street-level facial recognition arriving through AI glasses (Issue 2), the through-line for outside readers is that China’s face-recognition story is no longer only about state deployment; the contested frontier is the private, mundane, compulsory gate — and the rules being written there are the ones other regulators will be compared against.

Sources

• Jiemian News via Sina Finance: SPP typical cases, property-management face-data risks (2026-01-26)
• Nandu (Ao Yi News) via Tencent: Shenzhen estate face-only gate, sub-district office orders fixes (2026-05-16)
• China News Service via Tencent: residents resist estate face recognition, 2020 backdrop (2020-12-29)

Provenance & disclosure. Originally published in Chinese on our WeChat channel on 2026-09-05 (“不录人脸就回不了家？这门禁换得霸道”); drafted with AI assistance under human editorial direction. Translated to English on 2026-09-05 (AI-assisted, human-reviewed). This entry goes beyond translation: the SPP release date and the 1.5-million-record Chongqing example were verified against the Jiemian report, the Shenzhen estate and its rectification against the Nandu report, and the 2020 resistance against the China News Service original; the PIPL clause, the 2021 SPC interpretation and the 2025 CAC-MPS Safety Rules are stated per the official record as relayed in those verified reports. Where the take’s staging (Xi’an) diverges from the record (Beijing), the Figure arbitration line above flags it. This is translated commentary — not a SigPulse measurement. Our first-party measurements live in the dispatches and the /data/ ledger.