> What do you do? First ask them why they need this system. If it's reasonable then implement rules and laws so it can only be used for this specific purpose.

> What do you do? First ask them why they need this system. If it's reasonable then implement rules and laws so it can only be used for this specific purpose. If the reason for installing it is to prevent theft then they shouldn't have any problems with rules limiting them to this one specific usage and a fine if they used it for anything else (eg. marketing). We can also make up rules where it is acceptable to use it for marketing (informed consent being the bare minimum). These things, like face recognition of customers, have a tendency of spinning out of control. They say they originally used it for purpose X but because they have the data... Why not use it for purpose Y and Z?