Spanish supermarket chain Mercadona fined for facial recognition privacy violations
Spanish supermarket chain Mercadona fined for facial recognition privacy violations
Occurred: July 2021
Page published: November 2021
Supermarket chain Mercadona was fined EUR 2.5m by AEPD, Spain's data protection regulator, for illegally collecting and processing childrens' and employees' biometric data.
The stated aim of the programme was to detect known criminals and people with restraining orders issued against them for attacking Mercadona employees, with cameras equipped with facial recognition identifying relevant transgressors, who would then be reported to the police.
AEPD ruled, under the EU's General Data Protection Act (GDPR), that Mercadona had failed to appreciate that its system processed sensitive data of anyone who entered its supermarkets, including childen and its own employees.
The regulator also found that Mercadona had violated GDPR Article 12 and 13 transparency requirements, including the ability of those affected to complain or appeal.
Mercadona's facial recognition system was supplied by Israeli company AnyVision (since renamed Oosto).
Unknown
Operator: Mercadona
Developer: AnyVision (Oosto)
Country: Spain
Sector: Retail
Purpose: Identify criminal suspects
Technology: Facial recognition
Issue: Accountability; Privacy/surveillance; Transparency
AIAAIC Repository ID: AIAAIC0692