Facial recognition technologies have rapidly expanded in recent years, with their applications in security, commercial, and social domains increasing significantly. While this technology enhances efficiency and security, it simultaneously poses serious threats to citizens’ privacy and raises fundamental legal questions. Key issues include the collection, storage, and use of individuals’ biometric data, which, without legal oversight, can violate fundamental rights. The necessity of examining cyber law in the context of facial recognition arises from the fact that existing legal frameworks in many countries are not yet equipped to address the emerging threats of this technology, and legal gaps can lead to misuse of personal information. This study aims to analyze the legal challenges to privacy posed by facial recognition technology and propose legal measures for protecting citizens’ personal data. The research method in this article is descriptive–analytical and based on documentary studies, reviewing legal sources, scientific articles, and international documents. The findings indicate that implementing comprehensive regulations and updating existing laws can balance the utilization of advanced technologies with the protection of citizens’ rights, and transparency in the use of biometric data enhances public trust. The innovation of this article lies in presenting a combined analytical framework between cyber law and privacy for facial recognition technology, enabling comparison and application in future policymaking.