This has got to be a US thing, as this would almost certainly be illegal under the GDPR. Facial recognition is processing of biometric data, which belong to th

This has got to be a US thing, as this would almost certainly be illegal under the GDPR. Facial recognition is processing of biometric data, which belong to the "special categories of personal data", which are protected under Article 9 GDPR [1]. Customers would need to give explicit consent to this. Contrast this with normal security cameras, which don't use biometric data: these do not necessarily require consent. For example, security cameras filming a cashier's desk are usually lawful because of legitimate interests (see Article (6)(1)(f) [2]). But legitimate interests don't work with Article 9 data. [1] https://gdpr-info.eu/art-9-gdpr/ https://gdpr-info.eu/art-9-gdpr/ [2] https://gdpr-info.eu/art-6-gdpr/ https://gdpr-info.eu/art-6-gdpr/