What FRACT is
FRACT is an open, independent benchmark for the ethical and lawful deployment of facial recognition. It turns the general principles of data protection law into specific requirements that can be tested, evidenced and assessed, so that operators, suppliers and regulators all work to the same standard.
It is built as a core standard with sector modules. The first module covers self-exclusion in land-based gambling, where the need is most pressing. Further modules can extend the same discipline to other settings without starting again.
What FRACT tests
The five letters of FRACT are also its five principles. Every requirement in the standard falls under one of them.
Fairness
Demographic performance is tested and documented, and the deployment is proportionate to the problem it solves.
Responsibility
Clear accountability: named roles, trained staff, human oversight of every match, and governance that continues after go-live.
Accuracy
Algorithm performance is validated independently (for example through NIST testing), thresholds are set deliberately, and real-world performance is checked against BS 9347:2024.
Compliance
Lawful basis, special category condition, DPIA, Appropriate Policy Document, retention and deletion, all mapped to UK GDPR, the DPA 2018 and sector rules.
Transparency
Signage, privacy information, a working route to redress and an audit trail that can show what happened and why.
Why FRACT is open
A standard only works if people can see what it requires. FRACT is published so that operators, technology providers, regulators and the public can read it, measure against it and challenge it. A standard that has to be taken on trust does not do its job. Openness is what gives FRACT its authority.
FRACT is licensed to the sector on a royalty-free basis, and accreditation decisions are taken independently, with a documented right of review.
Who FRACT is for
Operator
A clear benchmark to deploy against, and evidence to show the regulator, your customers and your insurer.
Technology providers
A fair, published bar that any system can be tested against. Meet it and you can show it.
Scheme owners and trade bodies
A shared standard that raises the floor for every member without favouring any supplier.
Regulators and policymakers
A practical, sector-built framework that turns principle into practice.
Questions we are often asked
Is FRACT a legal requirement?
No. FRACT is voluntary. Each of its requirements, however, is tied to a legal duty, so meeting FRACT is strong evidence that those duties have been met.
Does FRACT endorse particular technology?
No. FRACT sets a bar that any system can be tested against. It does not recommend, rank or sell products.
Is FRACT only for gambling?
No. The core standard applies to any sector. Self-exclusion in land-based gambling is the first module because that is where the need is most immediate.
How does FRACT relate to BS 9347:2024?
BS 9347 sets out a code of practice for the ethical use of facial recognition in video surveillance. FRACT builds on it with sector-specific, assessable requirements and an accreditation process.
What does it cost?
Reading and using the standard is free. Formal accreditation requires an independent assessment, for which a fee is charged.
ELIAS and FRACT
ELIAS played a central role in developing FRACT, drawing on many years of advising on facial recognition and data protection law. We help organisations understand the standard and prepare to meet it.
