University vending machine error reveals use of secret facial recognition | A malfunctioning vending machine at a Canadian university has inadvertently revealed that a number of them have been usin…::Snack dispenser at University of Waterloo shows facial recognition message on screen despite no prior indication

  • Greg Clarke
    link
    fedilink
    English
    arrow-up
    3
    arrow-down
    22
    ·
    4 months ago

    There is no indication that the vending machine was collecting customer biometrics. In fact that would prevent it from being GDPR compliant.

      • Greg Clarke
        link
        fedilink
        English
        arrow-up
        4
        arrow-down
        16
        ·
        4 months ago

        That’s not true. They’re likely using a model that identifies some demographic attribute and associating that with a purchase. It’s 2024, this can all be done on the machine. The machine doesn’t need to store the individuals data etc. If the vending is storing enough data to identify individuals then it wouldn’t be GDPR compliant.

          • Greg Clarke
            link
            fedilink
            English
            arrow-up
            2
            arrow-down
            8
            ·
            4 months ago

            Consent is a requirement for GDPR compliance. They are likely taking an image from the camera, extracting semantic attributes from the image, and then discarding the image. The length of time the individual is standing there making the purchase is likely longer than the image is stored in memory while extracting the attributes.

            • uis@lemm.ee
              link
              fedilink
              English
              arrow-up
              7
              arrow-down
              1
              ·
              4 months ago

              I bet there is no button “consent to biometrics collection”