EU Funds AI Face Scanning at Africa's Borders

The European Union is funding AI-powered facial recognition and biometric surveillance systems at West African borders, using development aid money originally earmarked for schools and hospitals. French firm Civipol has won contracts worth tens of millions of euros to build mass biometric databases in Senegal, Mali, and Côte d'Ivoire — systems Privacy International says were built with no privacy or human rights risk assessments. Albis's Global Attention Index scores this story a 6.33 — only EU and African media are covering it. 4.4 billion people across the US, Middle East, South Asia, Asia-Pacific, and Latin America have no idea it's happening.

Civipol, a consulting firm attached to France's interior ministry and part-owned by Milipol — one of the world's largest arms trade fairs — has won contracts worth €60 million to build biometric civil registries in Senegal and Côte d'Ivoire alone. The money comes from the EU Trust Fund for Africa, a €5 billion fund set up after the 2015 migration crisis. According to Privacy International, 80% of that budget was diverted from development and humanitarian aid.

The systems aren't theoretical. They're already running. Nigeria issues biometric passports storing fingerprints and facial data. Senegal's national registry records the biometrics of every citizen. At border posts across the region, MIDAS kits — funded by the EU and operated by the International Organization for Migration — capture fingerprints and facial images, feeding them into the West African Police Information System (WAPIS). WAPIS, run through Interpol, links that data to EU-centralised databases.

The EU's AI Act bans untargeted facial recognition scraping inside Europe. But the systems the EU funds in West Africa face no such restrictions. A study published in Politikon by researcher Victor Iwuoha at Aberystwyth University found that European biometric companies have carved up the continent: Idemia controls systems in 25 African countries. Belgium's Semlex holds Côte d'Ivoire's databases in a contract estimated at €703 million. Germany's Veridos operates in Uganda, Zambia, and Morocco.

The deportation pipeline nobody connected

Here's where the story gets sharp. On March 26, the European Parliament voted 389 to 206 to allow member states to build deportation centres outside the EU. Far-right MEPs gave a standing ovation. Amnesty International called it "punitive detention and deportation plans." Eighty-eight NGOs protested.

What French-language media spotted — and English-language coverage missed entirely — is that these two stories aren't separate. The biometric databases being built across West Africa with EU aid money are the same systems that will verify identities and accelerate deportations under the new rules. Build the database first. Pass the law second. The infrastructure was already in place.

Euronews reported the vote as a matter of "increasing migrant returns." The Washington Post framed it as "Trump-like tactics." But neither connected the vote to the €30 million Civipol project in Côte d'Ivoire that Privacy International has documented — a project explicitly designed to identify irregular migrants already in Europe and speed up their removal.

What ECOWAS free movement has to do with it

West Africa has had visa-free movement since 1979. The Economic Community of West African States (ECOWAS) built one of the world's most open regional mobility systems, allowing 400 million citizens to cross borders for trade, work, and family.

The new biometric systems threaten that. As The Conversation reported this week, "AI-driven border surveillance is spreading across west Africa" and risks "undermining privacy, increasing discrimination and limiting free movement." Dr Iwuoha's research found that these EU-funded systems serve a dual purpose: they help local governments fight trafficking and terrorism, but they also function as Europe's externalised border — catching and cataloguing people thousands of kilometres before they reach European soil.

This is what researchers call "migration externalisation." Instead of policing its own borders, the EU pays African governments to do it. The catch: the technology remains under European corporate control, the data flows back to European databases, and the legal protections that EU citizens enjoy under GDPR don't apply.

The data protection gap

Only 15 of 55 African Union nations have ratified the Malabo Convention, the continent's nearest equivalent to data protection law. The convention lacks binding enforcement, clear definitions for terms like "cross-border processing," and accountability mechanisms for breaches.

In practice, this means millions of people's fingerprints and facial scans sit in databases operated by European companies, linked to Interpol systems, with almost no legal framework governing who accesses them, how long they're stored, or what happens when they're wrong.

And they do get it wrong. Biometric systems have well-documented accuracy problems with darker skin tones. A 2019 US government study found facial recognition algorithms were up to 100 times more likely to misidentify Black and East Asian faces. The systems being deployed across West Africa were built and tested primarily in European contexts.

Who's covering this — and who isn't

Albis's GAI analysis found this story exists in an information shadow. Only two of seven global regions — the EU and Africa — are covering it. The EU frames it as development aid and responsible migration management. African outlets frame it as surveillance infrastructure imposed with minimal consent.

The US, Middle East, South Asia, Asia-Pacific, and Latin America are completely blind. That's 4.4 billion people who don't know the EU is building a continent-wide biometric surveillance network with money that was supposed to fund development.

The sharpest framing gap: EU coverage presents Civipol's work as "modernising civil registries." African coverage calls it what Privacy International documented — "quietly building mass biometric databases."

What happens next

The biometric infrastructure is already built. The deportation law just passed. The next step is implementation. As EU member states begin setting up third-country deportation centres, the databases in Senegal, Côte d'Ivoire, and Mali will become the verification backbone — matching faces in European cities to records collected at West African borders.

The Malabo Convention remains unratified by most nations. No privacy impact assessment has been completed. And the companies building these systems — Idemia, Semlex, Civipol — answer to European shareholders, not African citizens.

Four hundred million West Africans now cross borders that scan their faces and store their fingerprints in databases they didn't consent to, governed by laws that don't exist, built with money that was supposed to build schools.

The EU calls it development. Africa calls it surveillance. Most of the world doesn't call it anything — because most of the world doesn't know.