Face recognition compares a face to a database to say who it is. It enables access control and search but is biometric data under GDPR and faces strict limits, including near-bans on certain public uses, in the EU AI Act — so deployment is a legal decision as much as a technical one.