Kmart's biometric data ruling highlights tech governance and privacy importance

TruSources to show off its on-device identity-checking tech at TechCrunch Disrupt 2025 Age verification laws are a privacy and security nightmare. This Battlefield startup performs age checks on-device, without users having to upload their IDs to the internet. https://lnkd.in/g_G8cK4N

𝐏𝐫𝐚𝐜𝐭𝐢𝐜𝐚𝐥 𝐥𝐞𝐬𝐬𝐨𝐧 𝐟𝐫𝐨𝐦 𝐭𝐡𝐞 𝐀𝐮𝐬𝐭𝐫𝐚𝐥𝐢𝐚𝐧 𝐏𝐫𝐢𝐯𝐚𝐜𝐲 𝐂𝐨𝐦𝐦𝐢𝐬𝐬𝐢𝐨𝐧𝐞𝐫 𝐨𝐧 𝐅𝐑𝐓 𝐝𝐞𝐩𝐥𝐨𝐲𝐦𝐞𝐧𝐭 The OAIC’s recent determination against Kmart company is a strong reminder that necessity and proportionality must guide the use of intrusive technologies such as facial recognition technology. In this case, FRT was used across 28 stores to tackle refund fraud, capturing the biometric data of every customer. The Commissioner found that: +The collection was indiscriminate and impacted thousands of individuals not suspected of wrongdoing. +Less privacy-intrusive alternatives were available. +The limited effectiveness of the system did not justify the scale of privacy intrusion. The outcome? Collecting sensitive biometric data for this purpose was disproportionate and in breach of the Privacy Act. What stands out is how the Commissioner balanced the legitimate aim (fraud prevention) with the privacy risks, applying a proportionality analysis similar to GDPR standards in the EU. https://lnkd.in/dudYmjEs

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

In August 2025, the Office of the Privacy Commissioner of Canada (OPC) issued new guidance for private-sector organizations deploying biometric initiatives. Read on to learn more about key considerations in privacy protection, best practices when handling biometric information, and how this advisory guidance at the federal level compares with Québec’s more prescriptive requirements. #BLGPublication #BiometricPrivacy #PIPEDA

Handing over a physical ID means handing over everything, name, address, date of birth, even height and weight. Most of the time, only one detail (like your age) is actually needed. The move toward digital driver’s licenses is so significant. Instead of oversharing by default, they’re designed around data minimization, showing only what’s necessary for the interaction at hand. Pair that with stronger privacy standards, and you start to see a shift: Consumers get more control over their digital footprint. Organizations reduce the risk of holding excess sensitive data. Everyday transactions become safer and more seamless. Do you see digital IDs as the solution to data overload, or just the next risk to manage? #DigitalIdentity #Innovation

China’s new Internet ID law isn’t just about control — it’s about expanding global influence through surveillance. In #TheHill, #Optiv’s James Turgal explains how the law could reshape the future of #Cybersecurity and digital privacy.