Privacy Commissioner publishes updated guidance on facial recognition in retail spaces
The OAIC published updated guidance on the use of facial recognition in retail spaces.
On 30 July 2026 the OAIC published updated guidance on the use of facial recognition in retail spaces. The updated guidance implements the findings of the Administrative Review Tribunal (ART) in the matter of Bunnings Group Limited (Bunnings), which concerned the retailer’s use of facial recognition technology in 62 of its stores for a period between 2018 and 2021.
It sets out how the Privacy Act applies when a business captures and matches people’s faces
The OAIC expects the use to be:
- Genuinely necessary and proportionate
- People to be given clear notice
- And a privacy impact assessment to be done before it is switched on.
If you use facial recognition in a store, a venue or a security system, this is the standard you will be measured against. Everyday AI tools are not affected.
Applies to: Businesses that use facial recognition, in a store, a venue, or a security system.