Already under siege over loose privacy controls and Russian manipulation, Facebook is about to be challenged on another issue: facial recognition.
The Electronic Privacy Information Center and several other consumer groups plan Friday to file a complaint with the Federal Trade Commission asking for an investigation into the network's use of facial recognition technology.
Facebook for years has used the technology to help users in tagging photos, but it has failed to gain proper consent for linking biometric markers with individual users, the technology watchdog groups say.
The social network has increased its use of facial recognition technology. "The problem is that the people Facebook is trying to 'tag' did not consent to being identified," says EPIC president Marc Rotenberg.
Facebook also "routinely makes misrepresentations to induce consumers to adopt wider and more pervasive uses of facial recognition technology," they allege in a draft copy of the complaint given to USA TODAY.
Those processes not only represent privacy concerns that the FTC should look into, the groups say, but also could be illegal because Facebook has to maintain certain privacy standards under a 2011 agreement with the FTC. "We think they are violating that consent order," Rotenberg said.
Also noted in the complaint: Facebook faces a class action suit in federal court in which Illinois residents charge that the social network's photo scanning measures violate users privacy.
Facebook says that when someone has their setting turned off, it doesn't use the technology to identify them in photos.
"Our face recognition technology helps people manage their identity on Facebook and makes our features work better for people who are visually impaired," said Rob Sherman, Facebook Deputy Chief Privacy Officer, in a statement.
It also uses facial identification to allow users to tag people more easily and to let them know if they've appeared in other people's photos or videos.
Facebook is not wanting for critics recently. The FTC is already investigating the company into whether it improperly shared data with political targeting firm Cambridge Analytica. The social network disclosed last month that Cambridge Analytica had obtained personal information from hundreds of thousands of users who had downloaded a personality profile app.
The app's developer also gathered information on users' friends and, Facebook said Wednesday, as many as 87 million people, mostly in the U.S., may have had their data improperly shared with Cambridge Analytica.
The U.K.-based Cambridge Analytica, which assisted Donald Trump's successful presidential campaign, has denied any improper use of Facebook data during the election campaign.
Facebook CEO Mark Zuckerberg is also scheduled to appear next week before Congress to discuss the social network's data privacy security measures.
Also earlier this week, Facebook said it had removed more Facebook accounts and pages—and Instagram accounts—linked to the Internet Research Agency. That Russian troll farm was charged with conspiracy and other crimes in an indictment issued in February by special counsel Robert Mueller.
In recent days, Zuckerberg has been conciliatory and spent nearly an hour talking with journalists on a conference call Wednesday. "We have to make ensure that all of those developers protect people's information, too," he said. "It's not enough to have rules requiring they protect the information and it's not enough to believe them when they tell us they are protecting information. ... We actually have to ensure that everyone in our ecosystem protects people's information."
In 2011, EPIC, the Center for Digital Democracy, Consumer Watchdog and the Privacy Rights Clearinghouse filed a complaint with the FTC charging that Facebook's collection and use of biometric data was occurring without consent of users.
As Facebook's facial recognition technology advanced, its identification of persons in photos—who might not even know a photo was taken of them—represents privacy problems and a violation of the company's agreement to get users' consent, the groups say. "The scanning of facial images without express, affirmative consent is unlawful and must be enjoined," the groups say in the complaint.
Explore further: Australia privacy chief to probe Facebook over data breach