Free to all retailers

Bunnings scores partial win in landmark facial recognition privacy case

Editor’s Choice

Ruling signals critical turning point for Australian retailers…

Bunnings will not be required to shut down its facial recognition system after the Administrative Review Tribunal of Australia ruled that the retailer had sufficient grounds to operate the technology.

The decision overturns a central finding by the Privacy Commissioner and affirms that major retailers may deploy facial recognition tools when there is a reasonable suspicion of criminal activity, provided customers are clearly notified that the technology is in use.

In its ruling, the tribunal accepted that Bunnings was responding to serious and ongoing security concerns across its stores.

Both before and during the relevant period, Bunnings faced a very real and serious problem of violence and theft in its stores,” the tribunal wrote.

We find that Bunnings responded to the significant level of retail crime being perpetrated by repeat offenders by implementing the facial recognition system so as to identify repeat offenders known to Bunnings and prevent them from engaging in further theft or violence.

However, the tribunal also partially upheld the Privacy Commissioner’s position, finding that Bunnings did contravene some clauses of Australia’s data privacy laws in aspects of its use of facial recognition.

As a result, the retailer will be permitted to continue operating its facial recognition-based theft prevention system, provided it resolves its privacy policy and public notification issues.

The ruling is expected to have immediate and wide-ranging consequences for retailers nationwide, particularly as the sector increasingly turns to biometric technologies to combat rising theft and violence.

Sign up for Retail Risk News

To have the latest industry news delivered FREE to your inbox every week, subscribe to the Retail Risk weekly newsletter. We take your privacy seriously and won't give any of your personal details to anyone else, for any reason.

Read our privacy policy.