The Office of the Australian Information Commissioner (OAIC) has published guidance on using facial recognition technology (FRT) in retail. The guidance differentiates between facial verification and facial identification. Organizations using FRT must have a reason, inform individuals, prevent bias, and have clear policies. The OAIC emphasizes that FRT significantly interferes with individual privacy.
The guidance encourages organizations to conduct Privacy Impact Assessments (PIAs) and consider alternative methods. The OAIC’s decision on Bunnings’ FRT use underscores the importance of proportionate FRT use. Organizations must demonstrate that FRT benefits outweigh privacy risks. The guidance provides a framework for assessing FRT use in commercial settings.