Face De-Identification: A Domain-Centric Survey from Capture to Processing
Not on the map. Why?
Abstract (arXiv)
Face de-identification (De-ID) aims to remove or conceal personally identifiable facial features in images or videos to prevent identity recognition while preserving utility for downstream tasks. With the rising emphasis on data privacy and responsible AI, face De-ID has emerged as an active research area spanning computer vision and privacy-preserving communities. Early approaches, and many contemporary ones, operate in the digital domain by modifying pixel-level or appearance-level features through post-capture processing. Recent advances extend face De-ID beyond post-processing by integrating privacy mechanisms directly into sensors during image acquisition, bridging sensing systems and downstream vision algorithms. In parallel, physical-domain methods explore wearable accessories and materials that conceal identity information in real-world environments prior to capture. In this survey, we present the first unified overview that spans the full data acquisition pipeline, encompassing the physical, sensor, and digital domains. Through this domain-centric lens, we systematically analyze current methodologies, technical progress, and the distinct challenges inherent to each stage. We then review and organize existing evaluation protocols, examining current practices and highlighting the critical need for standardized, comprehensive benchmarks. Finally, we identify key open problems and outline emerging research directions to guide future work in this rapidly evolving field. To support ongoing research, we maintain a project page that organizes relevant literature with collected datasets and open source code: https://github.com/CV-AC/Awesome-FaceDe-ID.
Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 89 of its 230 references that are in the map. First posted on arXiv 28 Jul 2026.
Builds on
89 of 230 references.
References · 89
- 2020Denoising Diffusion Probabilistic Modelscited by 20,851
- 2014Very Deep Convolutional Networks for Large-Scale Image Recognitioncited by 15,267
- 2018The Unreasonable Effectiveness of Deep Features as a Perceptual Metriccited by 11,029
- 2014Explaining and Harnessing Adversarial Examplescited by 7,287
- 2016Grad-CAM: Visual Explanations from Deep Networks via Gradient-based Localizationcited by 6,690
- 2018A Style-Based Generator Architecture for Generative Adversarial Networkscited by 5,986
- 2015Rethinking the Inception Architecture for Computer Visioncited by 5,451
- 2014Deep Learning Face Attributes in the Wildcited by 3,679
- 2019Analyzing and Improving the Image Quality of StyleGANcited by 3,580
- 2017Progressive Growing of GANs for Improved Quality, Stability, and Variationcited by 2,967
- 2015FaceNet: A Unified Embedding for Face Recognition and Clusteringcited by 2,833
- 2021Ego4D: Around the World in 3,000 Hours of Egocentric Videocited by 1,530
38 more
- 2017VGGFace2: A dataset for recognising faces across pose and agecited by 911
- 2017SphereFace: Deep Hypersphere Embedding for Face Recognitioncited by 733
- 2017VoxCeleb: a large-scale speaker identification datasetcited by 714
- 2019MaskGAN: Towards Diverse and Interactive Facial Image Manipulationcited by 624
- 2016MS-Celeb-1M: A Dataset and Benchmark for Large-Scale Face Recognitioncited by 621
- 2017AffectNet: A Database for Facial Expression, Valence, and Arousal Computing in the Wildcited by 490
- 2014Learning Face Representation from Scratchcited by 451
- 2022AdaFace: Quality Adaptive Margin for Face Recognitioncited by 390
- 2015WIDER FACE: A Face Detection Benchmarkcited by 297
- 2018CrowdHuman: A Benchmark for Detecting Human in a Crowdcited by 283
- 2019MOTS: Multi-Object Tracking and Segmentationcited by 222
- 2015The MegaFace Benchmark: 1 Million Faces for Recognition at Scalecited by 199
- 2019Efficient Decision-based Black-box Adversarial Attacks on Face Recognitioncited by 173
- 2019AdvHat: Real-world adversarial attack on ArcFace Face ID systemcited by 161
- 2016Regressing Robust and Discriminative 3D Morphable Models with a very Deep Neural Networkcited by 109
- 2019DeepPrivacy: A Generative Adversarial Network for Face Anonymizationcited by 108
- 2017Towards a Visual Privacy Advisor: Understanding and Predicting Privacy Risks in Imagescited by 101
- 2023Federated Learning for Generalization, Robustness, Fairness: A Survey and Benchmarkcited by 97
- 2021Adv-Makeup: A New Imperceptible and Transferable Attack on Face Recognitioncited by 95
- 2021Adversarial Sticker: A Stealthy Attack Method in the Physical Worldcited by 92
- 2020CIAGAN: Conditional Identity Anonymization Generative Adversarial Networkscited by 88
- 2017A General Framework for Adversarial Examples with Objectivescited by 82
- 2021Improving Transferability of Adversarial Patches on Face Recognition with Generative Modelscited by 80
- 2020Towards Transferable Adversarial Attack against Deep Face Recognitioncited by 79
- 2022Protecting Facial Privacy: Generating Adversarial Identity Masks via Style-robust Makeup Transfercited by 77
- 2018The Devil of Face Recognition is in the Noisecited by 65
- 2019LADN: Local Adversarial Disentangling Network for Facial Makeup and De-Makeupcited by 63
- 2020Towards Face Encryption by Generating Adversarial Identity Maskscited by 62
- 2019AdvFaces: Adversarial Face Synthesiscited by 59
- 2021Deep Gait Recognition: A Surveycited by 54
- 2016From Facial Expression Recognition to Interpersonal Relation Predictioncited by 53
- 2019AnonymousNet: Natural Face De-Identification with Measurable Privacycited by 50
- 2019Live Face De-Identification in Videocited by 48
- 2016Privacy-Preserving Human Activity Recognition from Extreme Low Resolutioncited by 43
- 2023Attribute-preserving Face Dataset Anonymization via Latent Code Optimizationcited by 43
- 2022Adv-Attribute: Inconspicuous and Transferable Adversarial Attack on Face Recognitioncited by 42
- 2023CLIP2Protect: Protecting Facial Privacy using Text-Guided Makeup via Adversarial Latent Searchcited by 42
- 2024ConsistentID: Portrait Generation with Multimodal Fine-Grained Identity Preservingcited by 42
50 most cited of 89 All 89 (JSON)
Built on by
Not cited yet.