○ PRIVACY 3 YEARS HORIZON RESOLVES 11 NOV 2029 · in 3.0y

The European Union or US federal government mandates retention limits of 30 days or less for commercial facial recognition biometric templates by end of 2028.

Scrutiny over biometric template retention prompts legislative debates over storage duration limits. Resolves if federal or EU-wide law restricts retention to 30 days maximum.

Across 6 frontier models answering independently, the panel has all but ruled it out: the median is 10%.

They broadly agree, 14 points between GPT at 18% and Claude at 4%.

Nothing is settled until 11 Nov 2029, when the outcome is checked against sources and every number above gets a permanent score.

MODEL BY MODEL

What each one said

  • GPTOpenAI

    An EU-wide or US federal 30-day cap needs unusually prescriptive legislation, not the narrower rules now typical.

    • Congress has no enacted comprehensive federal biometric privacy law, and state laws generally require deletion when purpose ends rather than 30 days.
    • EU GDPR’s storage-limitation principle is case-specific; the AI Act regulates some facial-recognition uses but does not impose a general 30-day template cap.
    • Odds rise sharply if a major misuse scandal produces a federal privacy bill or an EU GDPR/AI Act amendment before 2028.
    openai/gpt-5.6-terra · asked 12 Nov 2026
    18%
  • GeminiGoogle

    Omnibus retention mandates as tight as 30 days break enterprise workflows and face fierce lobbying from retail and tech.

    • The EU AI Act and GDPR rely on proportionality rather than arbitrary hard-stop caps like 30 days for private commercial databases.
    • US federal biometric privacy legislation remains completely stalled in Congress with no bipartisan appetite for 30-day deletion.
    • A catastrophic biometric breach exposing millions could prompt emergency rulemaking, but 3 years is too fast for statutory consensus.
    google/gemini-3.8-flash · asked 12 Nov 2026
    12%
  • GrokxAI

    Turns on EU (not US) writing a numeric 30-day commercial FR-template cap into law by 2028.

    • US Congress has never enacted a federal privacy statute; a 30-day FR limit is even less plausible than ADPPA.
    • GDPR and the AI Act already restrict FR but set no retention ceiling; a 30-day rule needs fresh legislation.
    • Base rate of EU numeric biometric-retention mandates is near-zero; only a major scandal would change that.
    x-ai/grok-4.6 · asked 12 Nov 2026
    12%
  • DeepSeekDeepSeek

    No EU or US federal bill currently proposes a 30-day biometric template cap; the gap between debate and enacted law is the whole story.

    • The EU AI Act (in force Aug 2024) and GDPR regulate biometric data but set no numeric retention cap; member-state DPAs issue guidance, not 30-day mandates.
    • In the US, no federal privacy bill has cleared Congress since 2020; state laws like Illinois BIPA and Texas CUBI cap nothing at 30 days, and a federal preemption fight…
    • The one development that would change this: a European Data Protection Board decision or Commission implementing act imposing a hard 30-day limit, which would signal…
    deepseek/deepseek-v4.1-flash · asked 12 Nov 2026
    7%
  • QwenAlibaba

    A hard 30-day cap on biometric template retention is far more prescriptive than any current EU or US legislative trajectory.

    • EU AI Act and GDPR use purpose-limitation principles, not fixed retention ceilings; no known draft proposes a 30-day biometric cap.
    • US Congress has failed to pass even a baseline federal privacy law (ADPPA stalled since 2022); a targeted biometric retention mandate is a further leap.
    • Even where numerical retention limits exist (e.g., some EU member-state CCTV rules), they typically run 30–90 days and apply to footage, not templates tied to ongoing…
    qwen/qwen3.8-max-0902 · asked 12 Nov 2026
    6%
  • ClaudeAnthropic

    Needs a specific federal/EU law capping biometric retention at 30 days, which no current proposal targets.

    • GDPR and state biometric laws (BIPA, Texas CUBI) use purpose-limitation or 'reasonable' deletion standards, not a hard 30-day cap.
    • US federal privacy legislation (ADPPA-style bills) has repeatedly stalled in Congress and no draft specifies 30-day biometric retention.
    • EU AI Act and GDPR reforms are the live vehicles but focus on risk classification and consent, not numeric retention ceilings, making this specific threshold unlikely by…
    anthropic/claude-sonnet-5 · asked 12 Nov 2026
    4%

6 of 6 models answered · 14 points between the highest and lowest. None was shown the market price.

WHAT DO YOU THINK?
loading…

Question sourced from a news sweep on 12 Nov 2026. Forecast by google/gemini-3.8-flash, anthropic/claude-sonnet-5, openai/gpt-5.6-terra, x-ai/grok-4.6, deepseek/deepseek-v4.1-flash, qwen/qwen3.8-max-0902 via OpenRouter.