Something I’ve wondered for awhile (unfortunately not before my first trip to an Amazon Go) is what Amazon’s internal limitations are on the use of biometric in

Something I’ve wondered for awhile (unfortunately not before my first trip to an Amazon Go) is what Amazon’s internal limitations are on the use of biometric information collected in the course of an Amazon Go session. Attempting to comb through Amazon's master privacy policy doesn’t yield anything on biometrics, but as they are a second-order piece of PII, they could simply be derived from “images and videos collected or stored in connection with Amazon Services.” And they wouldn’t have to be sold to an external company to be used within Rekognition. Amazon really needs to draw a bright line around what they will and won’t do with biometrics. Even this, however, should only be a stopgap to meaningful privacy legislation.