Privacy Commissioner publishes updated guidance on facial recognition in retail spaces
The OAIC published updated guidance on the use of facial recognition in retail spaces.
On 30 July 2026 the OAIC published updated guidance on the use of facial recognition in retail spaces. The updated guidance implements the findings of the Administrative Review Tribunal (ART) in the matter of Bunnings Group Limited (Bunnings), which concerned the retailer’s use of facial recognition technology in 62 of its stores for a period between 2018 and 2021.
It sets out how the Privacy Act applies when a business captures and matches people’s faces
The OAIC expects the use to be:
- Genuinely necessary and proportionate
- People to be given clear notice
- And a privacy impact assessment to be done before it is switched on.
This matters if you use facial recognition, in a store, a venue, or a security system. Most Everyday AI tools are not affected. If you do use facial recognition, this as the standard you will be measured against.
Applies to: Businesses that use facial recognition, in a store, a venue, or a security system.