← the record
AIAAIC-1012

Canadian Tire covertly uses facial recognition to collect user data

Canadian Tire came under fire from British Colombia's privacy commissioner for illegally operating facial recognition technology in four of its stores in the province. The company used AxxonSoft and FaceFirst systems to collect facial images and videos of people entering Canadian Tire stores, created biometric templates, and compared them to a database of previously collected photos and biometric templates representing people of interest who had allegedly been involved in incidents at Canadian Tire stores in the same region. The commissioner singled out (pdf) t he retailer's failure to properly notify customers of its use of the technology or obtain consent to collect and use their personal data . It also said that even if the stores had obtained consent, they were required to demonstrate a reasonable purpose for collection and use, which Canadian Tire had also failed to do. Canadian Tire removed the systems in British Colombia and destroyed the data when notified that it was under investigation, the regulator said. The company was ordered to create and maintain a robust data privacy management programme. System 🤖 AxxonSoft 🔗 FaceFirst 🔗 Operator: Canadian Tire Developer: AxxonSoft; FaceFirst Country: Canada Sector: Retail Purpose: Strengthen security, safety Technology: Facial recognition Issue: Privacy; Transparency Legal, regulatory 👩🏼‍⚖️ Office of the Information and Privacy Commissioner for British Colombia (2023). Canadian Tire Associate Dealers' use of facial recognition technology

Date it happened
2023-04-01
Organisation involved
Canadian Tire
Product, system or model
Face PSIM, FaceFrist
Where this came from
Share this incident
XLinkedInFacebookWhatsAppEmail
Attribution

This incident was imported from AIAAIC and is used under CC BY-SA 4.0. Our additions to it — the structured fields, the translation, the checks against other reports — are published under the same licence.

This is a record of what was reported, not a finding that anyone broke the law. If it names your organisation and you believe it is wrong, the corrections process is free and open to everyone.