Facial recognition technology greatly enhances the operational and management efficiency of medical institutions，it also brings potential technological application and legal risks. In terms of subject compliance，medical institutions are not the natural compliant entities applying facial recognition technology. In practical application，there is a risk that the diagnostic autonomy of doctors under the scrutiny of video surveillance and facial recognition devices may be compromised. In terms of information rights protection，the informed consent rights of patients are at risk of being substantially violated，which means it is necessary to refine corresponding regulatory approaches to address these legal risks. Efforts can be made to enhance the compliance of medical institutions in applying facial recognition technology，differentiating between different application scenarios of facial recognition technology within medical institutions， and ensuring patients’ informed consent rights.