Your Face Gets Scanned the Second You Walk In. Australia Just Said No.

Two of Australia's biggest retail chains got caught scanning the face of every single customer who walked through the door. Not shoplifters. Not suspects. Everyone. Australia's privacy regulator looked at that and said — that's illegal.

If you've ever walked into a hardware store or a

If you've ever walked into a hardware store or a department store, this story is about your face. Because that scan can happen without a sign, without a warning, and without you ever saying yes. The Australian regulator ruled against two chains — Kmart and Bunnings — for capturing the biometric data of every shopper who entered. Biometric data just means the unique map of your face. The kind of thing you can't change like a password. So the question that runs through this whole episode is simple. When a store scans your face just for showing up — who's supposed to say that's allowed?

Let's start with what those two retailers actually did. According to Australia's privacy watchdog, both chains ran facial scanning on every person walking in. Not a targeted watchlist. A dragnet — everyone, all the time. The regulator said that fails the most basic privacy test on the books. And that matters, because it sets a hard record — mass face collection isn't a gray area anymore. It's a breach.

Now, why did regulators move so decisively? Look at how the public mood shifted. Back in 2023, about a quarter of Australians named facial recognition as a top privacy worry. By 2026, that jumped to nearly half. That's not a niche complaint from privacy nerds. That's mainstream unease. When almost half your customers are uneasy about a technology, it stops being a quiet backroom decision.

What's the new bar retailers have to clear

So what's the new bar retailers have to clear? Australia calls it a proportionality test. In plain terms — you have to prove you actually need it. A store must show there's no less intrusive way to solve the problem. They have to tell people it's happening. They have to guard against false matches. A false match is when the system flags the wrong person as a suspect. For a business, that kills lazy deployments — you can't just switch it on because a vendor sold you the box. For you and me, it means a store can't secretly turn your face into evidence.

Here's the part that should get every American listener's attention. The United States has almost none of this. Most states have no law specifically about facial recognition in stores. And U.S. retailers are moving fast — by 2025, nearly one in five were piloting or already using face scanning. That's up from about one in eight three years earlier. More stores, more scanning, and barely any rules.

Now — retailers aren't inventing a problem. The security pressure is real. Industry surveys say shoplifters have gotten more violent, with the vast majority of retailers reporting the violence held steady or got worse. The face scanning is a response to that. But the concern was never whether it helps catch thieves. It's that scanning every innocent customer — and shipping that face data to an outside vendor — puts millions of people into systems they never agreed to.