Facial Recognition in Doha: Smart City Uses, Benefits and Rules

Two very different uses of facial recognition

Access control

People who have enrolled choose to use their face to open a door, pass a speed gate or record attendance. This is common in offices, government buildings, hospitals and residential towers. See facial recognition devices and our access control system.

Surveillance

Cameras compare faces they see with a watch list, for example to find a missing person or detect someone banned from a venue. This is a much more sensitive use, typically limited to authorised security bodies and specific, lawful purposes.

Mixing up the two leads to bad decisions. A company that wants touchless entry for its staff needs access control readers, not watch-list surveillance.

Where facial recognition helps in Doha

Office towers and business districts

Touchless lobby entry in West Bay and Lusail towers, combined with visitor passes and lift control.

Transport and venues

Faster, controlled entry for staff areas at stations, airports and stadiums, alongside ticketing for the public.

Government buildings

Strong identity checks at restricted areas, often with systems hosted on government networks.

Healthcare

Touchless access for clinical staff to pharmacies, theatres and restricted wards.

Residential and hospitality

Resident access in towers and compounds, and staff areas in hotels.

How the technology works

A facial recognition system has three parts:

• Capture: a camera or reader takes an image of the face, ideally from the front and in good light.
• Liveness and matching: software checks that a real person is present, creates a template and compares it with enrolled templates.
• Decision: in access control, the controller opens a door if the person is authorised. In surveillance, a possible match is shown to a human operator for review.

Qatar’s data protection law

Qatar’s law on the protection of personal data privacy applies to biometric data such as face templates. Organisations should:

• Define a clear, lawful purpose for using facial recognition
• Inform people, with notices at enrolment points and signs where cameras are used
• Collect only what is needed and keep it only as long as necessary
• Protect templates with encryption and access controls
• Host data securely, preferably in Qatar
• Offer an alternative credential for access control where appropriate

Public sector and critical infrastructure sites also follow national cybersecurity requirements. Your legal team should review any deployment, especially surveillance uses.

Choosing equipment for Doha’s climate

Outdoor readers and cameras must handle heat, humidity and bright sunlight. Indoors, the biggest challenge is backlight from glass entrances. Readers should be placed where people naturally face them, away from direct sun.

Accuracy and fairness

Modern systems are accurate when installed well, but no system is perfect. Good practice includes testing with your own staff, setting thresholds carefully, keeping a human in the loop for surveillance matches and reviewing performance regularly.

Deploying responsibly: a checklist

1. Decide whether you need access control or surveillance.
2. Document the purpose and legal basis.
3. Choose devices with liveness detection.
4. Plan enrolment, consent notices and an opt-out route.
5. Encrypt and host data securely.
6. Limit who can manage templates and view footage.
7. Review performance and data retention regularly.

How Expedite IoT helps

We supply and install facial recognition readers for access control and attendance, including the HID Amico, connected to our TekAccess platform with doors, turnstiles and visitor passes. For camera-based analytics, see video analytics.

Example scenario: a Lusail office tower

Consider a new office tower in Lusail with several tenants. The developer wants touchless entry without compromising security. Enrolled staff are recognised by face readers mounted on pedestals before the lobby speed gates, while visitors use QR passes issued by the visitor management system. Templates are encrypted and stored on servers in Qatar, enrolment includes a clear privacy notice and staff who prefer not to enrol use cards. Security sees every entry in one dashboard, and tenants manage their own staff.

Facial recognition and visitor management

Visitors are a common reason for queues in Doha’s busy lobbies. Invited visitors can enrol their face before arrival through a secure link and use a face fast lane for the day of their visit. Their template is deleted when the visit ends. Walk-in visitors still use ID scanning at a kiosk. See our visitor management system.

Common mistakes

• Using surveillance-style recognition when the goal is simply touchless staff entry
• Installing readers facing bright glass entrances
• Skipping the privacy notice at enrolment
• Storing templates without encryption or outside the country
• Removing every alternative credential

Questions to ask suppliers

• Does the reader include liveness detection?
• Where are templates stored, and can they stay in Qatar?
• How does the system handle people who opt out?
• Can it connect to our existing access control and visitor management?
• Who supports the system locally?

How to start a pilot

A pilot is the safest way to test facial recognition in a Qatar building. Choose one entrance with steady traffic, enrol a group of volunteers, and run face and card side by side for a month. Measure recognition speed, false rejections at different times of day, user feedback and how often staff need to help. Review the privacy notice and data handling with your legal team before the pilot starts, then decide whether to expand to other entrances.