ICO investigation concluded (March 2023) that Facewatch had a legitimate interest basis to operate its live facial recognition, after agreed improvements; no fine or enforcement notice issued
Southern Co-op used the Facewatch live facial recognition system in stores to deter theft. After investigating complaints, the ICO concluded in March 2023 that Facewatch could rely on the legitimate interest lawful basis, provided it made changes to reduce the personal data it processed and how long it retained it. The ICO did not take enforcement action, but stressed the high bar retailers must meet to justify live facial recognition under UK GDPR, including a robust data protection impact assessment and strict proportionality.
Southern Co-op used the Facewatch live facial recognition system in stores to deter theft. After investigating complaints, the ICO concluded in March 2023 that Facewatch could rely on the legitimate interest lawful basis, provided it made changes to reduce the personal data it processed and how long it retained it. The ICO did not take enforcement action, but stressed the high bar retailers must meet to justify live facial recognition under UK GDPR, including a robust data protection impact assessment and strict proportionality.
ICO investigation concluded (March 2023) that Facewatch had a legitimate interest basis to operate its live facial recognition, after agreed improvements; no fine or enforcement notice issued
This summary is provided for general information and is not legal advice. Enforcement outcomes can be appealed or revised; verify the current position against the primary sources above.