Facial Recognition in Stores: What Shoppers Should Know Now

Wegmans, yes, the grocery chain that New Yorkers treat like a religion, admitted earlier this year that it had been using face-scanning technology at some of its stores. Not a huge announcement. No press release. Just a quiet acknowledgment that, yes, the system was running. Shoppers had no idea.

That Wegmans moment is exactly why Monroe County legislators are now pushing a bill that would require any retailer using biometric identification technology to say so, plainly, visibly, before you walk in. Not buried in a terms-of-service document. Not footnoted on a website. A real, honest heads-up.

This sounds obvious, right? Of course you should know if a store is scanning your face. And yet, in most of the country, nobody has to tell you anything.

---

Facial Recognition Biometrics: What Retailers Collect

Let's be precise, because this word gets thrown around loosely. Biometric data is information that comes from your body, your face, your fingerprints, the pattern of your voice. The kind of data that's uniquely, permanently you. You can change a password. You cannot change your face.

When a retailer uses a face-scanning system at the entrance or inside the store, it doesn't just take a photo. It converts your face into a mathematical template, a string of numbers that represents the specific geometry of your features, and then stores that template. For future comparison. For matching against a database. Potentially for sale to a data broker, depending on what the retailer's contract allows.

That last part is the piece that makes this categorically different from a regular security camera. A standard camera records footage and, in most cases, deletes it after a few weeks. A biometric system builds a file on you. There's a meaningful difference between "we recorded you walking past the dairy section" and "we created a permanent mathematical identity signature from your face and kept it." This article is part of a series, start with Your Face Was Scanned Saturday Nobody Asked If That Was Lega.

Illinois passed a law called BIPA, the Biometric Information Privacy Act, that lets you actually take a company to court if they collect your biometric data without consent. It has teeth. It has produced real lawsuits and real settlements. The rest of the country? According to BCLP's U.S. biometric laws tracker, most states have general privacy laws that offer limited, often untested protection, and nothing specific to what happens when a retailer scans your face on a Tuesday afternoon while you're picking up milk.

---

Facial Recognition in Retail: Monroe County's Rules

The Monroe County bill, as reported by 13WHAM, has three core requirements. First: businesses must tell customers they collect biometric data, clearly and at the point of entry. Second: they cannot sell or transfer that data to third parties. Third: any stored data must be destroyed after two years.

That two-year destruction requirement might be the most important part of the whole thing, and it's also the part getting the least attention. Permanent data retention is where the real risk lives. A shoplifter database that gets breached next year is one problem. A shoplifter database that's been accumulating for a decade, sold to an insurance company or an employer, is a fundamentally different problem.

"Constituents were extremely concerned that biometric data was being collected without their knowledge and consent." Legislator Rachel Barnhart, as reported by Rochester First (WROC)

Barnhart is the legislator pushing the bill. She's not calling for a ban. The word "ban" doesn't appear in this proposal. The ask is genuinely minimal: be honest with the people walking through your door.

Not everyone agrees that even this is reasonable. Sean McCabe, who leads the Legislature's Republican caucus, called the measure more of a hindrance to businesses than a protection, arguing it could get in the way of fighting shoplifting and fraud, which has become a serious and growing problem for retailers. That concern deserves to be taken seriously. Organized retail theft is real, the costs are real, and these systems do catch people.

But here's the thing: if a face-scanning system truly only flags known shoplifters, a sign at the door doesn't stop it from working. The sign doesn't disable the camera. It just tells the truth. Previously in this series: Better Appearing Glasses Are Not Medical Treatment The 4 Wor.

---

Facial Recognition Regulation: From Disclosure to Bans

Monroe County's proposal sits in the middle of a rapidly forming range of local responses to retail face-scanning, and understanding where it sits helps you understand what's actually being debated.

On one end: Erie County, New York, which didn't just require disclosure, it banned the collection of biometric data by retailers outright. That's the hard stop. No scanning, period. According to ID Tech Wire, Monroe County legislators are watching what Erie did and considering whether disclosure is a sufficient first step or just a placeholder until a harder rule becomes politically possible.

On the other end: most of America, where there is currently no requirement to disclose anything, to anyone, at any time.

Monroe's bill is the middle position. Disclosure, not prohibition. And it matters precisely because it's the middle position, it's the kind of rule that can actually pass in places where an outright ban would stall. It's the version of this fight that could spread.

What "Just a Sign" Actually Unlocks

Here's something that doesn't get said enough about disclosure requirements: they're not the endpoint. They're the starting gun.

Right now, if you're a shopper and you suspect a store is scanning your face, you have almost no way to confirm it, challenge it, or opt out of it. The technology is invisible by design. Once disclosure is required, once that sign has to appear at the door, something shifts. You know. And knowing changes the dynamic entirely. Up next: Your Face Got Scanned At Wegmans Nobody Had To Tell You.

Suddenly, reporters can ask: "Your sign says you collect biometric data. Who's your vendor? How long do you keep it? Have you ever had a breach?" Legislators can ask the same. So can lawyers. The sign doesn't solve the problem, but it makes the problem visible. And visible problems get fixed faster than invisible ones.

If you've ever wondered whether a store, an app, or a service is really who, or what, it claims to be, that's the exact instinct this kind of transparency rule is designed to support. The practical thing you can do right now: next time you walk into a large retail store, look for any notices near the entrance about security systems or data collection. They're not required in most places yet, but some stores post them voluntarily. The absence of any notice, given how widely these systems are being deployed, is itself information.

As State of Surveillance's state-by-state guide makes clear, the patchwork of laws here is not an accident, it reflects genuine, ongoing disagreement about who owns your face in a commercial space. Is it you? The store? The vendor the store hired? The answer right now is: whoever gets to it first, with the best lawyers.

Monroe County is trying to change that calculation by one small, specific degree. Enough to make the technology visible. Enough to let the next question get asked out loud.

Here's the question worth sitting with: a store posts a sign that says they scan faces for security. Does that sign make you feel informed, or does it make you wonder, for the first time, who else has been looking at your face for the past two years without one?

Deploying Facial Recognition: Why Retailers Are Moving Fast

Retailers are deploying facial recognition for a mix of reasons that rarely get explained to shoppers. Some say it's about stopping theft. Some use it to spot known shoplifters the moment they walk in. Others quietly test it for marketing, tracking repeat customers, measuring how long people linger near a shelf, or flagging a "VIP" shopper for special attention. The problem is that deploying facial recognition without telling anyone means shoppers can't tell which use case they're actually part of. A theft-prevention camera and a marketing camera look identical from where you're standing. Without disclosure, you have no way to know if the store is protecting its shelves or building a profile of your shopping habits.

Recognition Technology: How It Actually Works in a Store

Recognition technology used in retail settings generally works the same way no matter who sells it. A camera captures your face, software measures the distance between key points, eyes, nose, jawline, and turns that into a numeric template. That template gets compared against a stored database of other templates, looking for a match. The recognition technology itself doesn't care whether it's matching you against a shoplifter watchlist or a loyalty-program list; the outcome depends entirely on how the retailer configured it and what data it's allowed to keep. That's exactly why disclosure rules matter, the technology is neutral, but its use isn't.

Retail Facial Recognition: A Patchwork, Not a Standard

Retail facial recognition rules currently vary so much from place to place that a shopper crossing a county line can go from zero protection to a full ban. Illinois built the strongest consumer protection with BIPA. Erie County banned retail facial recognition outright. Monroe County is proposing disclosure instead of a ban. Most of the rest of the country has nothing on the books at all. That patchwork means the same national retail chain can be operating under three different sets of rules depending on which store you walk into.

Recognition Systems: What "Disclosure" Would Actually Require

Under the Monroe County proposal, recognition systems in a store would need to be flagged to customers before they walk through the door, not buried in a receipt or a privacy policy nobody reads. Retailers would still be allowed to run recognition systems for security purposes. What they would lose is the ability to run them silently. The bill also limits how long data from these systems can be kept and bars selling it to third parties, which addresses two of the biggest risks beyond the scanning itself.

Facial recognition in stores has moved from a rare, experimental tool to something quietly present in grocery stores, pharmacies, and big-box retailers across several states. Most shoppers walking past one of these cameras have no idea it's even running, let alone what happens to the data afterward. That gap between how common the technology has become and how little anyone is told about it is precisely the gap Monroe County's bill is trying to close. Facial recognition in stores works the same everywhere technically, but the rules governing it are wildly inconsistent depending on where you happen to be shopping.

It helps to separate the technology from the policy question, because they get conflated constantly. Facial recognition itself is just software, cameras, templates, and a matching algorithm. Whether it's used responsibly is a policy question, and policy is exactly what varies from Illinois to Erie County to Monroe County to everywhere else. A store using facial recognition in Illinois faces real legal exposure if it doesn't get consent first. A store doing the identical thing in most other states faces essentially none.

Privacy advocates who've pushed for these disclosure rules argue that the current default, silence, puts all the risk on the shopper and none on the business. If a retailer's biometric database gets breached, it's the customers whose facial templates get exposed, not the company's leadership. A disclosure requirement doesn't fix a breach after it happens, but it at least lets people decide, in advance, whether they're comfortable being scanned in a particular business.

There's also a business argument for disclosure that sometimes gets lost in the privacy debate. A retailer that's upfront about its security technology can frame it as a selling point, "we protect our stores and our honest customers", rather than something that leaks out later and looks like it was hidden on purpose. The Wegmans story became a story precisely because the company hadn't said anything. Had there been a sign, there likely would have been no headline at all.

Data retention is the other half of this that deserves more attention than it usually gets. A facial recognition template isn't like a photo sitting in a folder, it's a compact mathematical fingerprint that can be matched instantly, which is exactly what makes it valuable and exactly what makes it risky if mishandled. The two-year deletion requirement in the Monroe County bill directly targets this risk by making sure retail facial recognition data doesn't just accumulate forever with no oversight.

For now, the most useful thing a shopper can do is pay attention. Look for signage. Ask an employee if the store uses facial recognition or biometric security if you're unsure. Ask what happens to that data once it's collected. None of these questions are guaranteed to get a clear answer today, but as more counties consider bills like Monroe's, asking the question out loud is part of how the pressure for real answers builds.

Facewatch offers a useful real-world comparison for how facial recognition in retail actually gets deployed. It's a UK-based system that some stores use specifically to flag people already known for theft, rather than to scan every shopper who walks in for general marketing purposes. Retail facial recognition cameras can identify known criminals this way by matching a new face against a watchlist built from prior incidents, which is the core pitch retailers make when defending the technology. Whether a system works like Facewatch or like something quieter and less disclosed matters enormously for how much privacy risk a shopper is actually exposed to.

Retailers justify using facial recognition mostly on security grounds, and that argument isn't baseless, organized retail crime has genuinely gotten worse in many places, and stores are looking for tools that work faster than a manager trying to remember a face from six months ago. Facial recognition can increase security in a narrow, specific sense: it can catch a repeat shoplifter faster than a human ever could. The disclosure debate isn't really about whether that security benefit is real. It's about whether shoppers deserve to know the tool exists before they walk through the door.

Face recognition is highly controversial precisely because the same camera that catches a shoplifter can also track customer movements for reasons that have nothing to do with theft. A retailer running smart surveillance across its stores can use the exact same hardware to build shopping-pattern profiles, test targeted promotions, or flag a "high-value" customer for special attention. None of that is illegal in most states right now, and none of it requires telling you it's happening. That overlap, one camera, two very different purposes, is exactly why disclosure and data protection rules matter more than debates over whether the technology itself should exist at all.

Facial recognition will facilitate retail evolution whether or not local disclosure laws keep pace with it, which is part of what makes Monroe County's bill feel urgent rather than theoretical. Retail security teams are already using recognition tools for loss prevention, and customer experience teams are separately exploring the same underlying technology for personalization. As those two uses converge inside the same store, the line between "keeping shoppers safe" and "watching shoppers constantly" gets harder to see from the sales floor. A disclosure requirement doesn't erase that overlap, but it forces retailers to be honest about which side of the line they're actually operating on.