Bunnings, the hardware giant, has been given the green light to use facial recognition technology on customers to combat crime, sparking a heated debate on privacy and security. The Administrative Review Tribunal has reversed a 2024 ruling by the Australian Privacy Commissioner, finding that Bunnings had not properly notified customers about the scanning of their faces. However, the tribunal agreed that the technology was justified for the limited purpose of preventing significant retail crime and protecting staff and customers from violence, abuse, and intimidation. This decision comes after a two-month trial in one store in 2018, during which hundreds of thousands of people had their faces scanned against a database of banned individuals. Bunnings' national security manager, Alexander MacDonald, testified that the technology had successfully identified repeat offenders and organized retail criminals, with a high proportion of investigations resulting in their apprehension. The tribunal also noted that the system had a low rate of false positives, which were manually reviewed and discarded. Despite this, the decision has raised concerns about the potential for racial bias in facial recognition technology, as studies have shown a higher risk of false positives for non-white and non-male subjects. Bunnings' managing director, Mike Schneider, welcomed the ruling, emphasizing the company's commitment to customer and staff safety. However, a spokesperson for the Office of the Australian Information Commissioner (OAIC) stated that the decision confirms the Privacy Act's strong protections for individual privacy, and that limited exemptions must be assessed on a case-by-case basis. The OAIC has not ruled out appealing the decision, citing the need to consider the implications further.
