• Skip to main content
  • Skip to footer
  • About
    • Board of Directors
    • Advisory Board
    • Code of Ethics
    • Privacy Commitment
    • Fellowship Awards
    • Media
  • Get Involved
    • Membership
      • Advancing the Profession
      • Member Benefits
      • Why Join the PACC
      • Member Contact Update
    • Speak Out
    • Volunteer
    • Donate
      • Donor Bill of Rights
  • Certification
    • Apply for Certification
    • Recertification
    • Why Pursue Certification?
    • Certificate or Certification?
    • Accreditation
  • Resources
    • Strategic Privacy and Access Resource Center
      • Parents & Teachers
      • Standards
      • SPARC Contribution Guidelines
    • International Data Flows
    • Commissioners
    • Careers
    • Publications
    • Training & Education
  • Data Privacy Day
  • News & Views
    • Guest Post Guidelines
  • Contact
    • Speaking Invitations & Media Requests
    • Stay Informed & Avoid Spam
    • Partner
  • Login

The Privacy and Access Council of Canada

The voice for privacy and access

Commissioners agree with PACC that facial recognition without meaningful consent is problematic

06/Nov/2020

In late July of 2018, an observant shopper at Calgary’s Chinook Centre mall saw an electronic wayfinding directory displaying computer code suggesting that facial recognition technology was being used in the display boards.

Days later, PACC asked the Privacy Commissioner of Canada and the Information and Privacy Commissioner of Alberta to investigate and determine if this use of facial detection/recognition, surveillance, and tracking technologies in retail environments complied with or contravened PIPEDA and PIPA. We also questioned the manner, sufficiency, and timing of notice given to consumers that images of their faces would be captured for analysis, and the opportunity for individuals to provide or withhold meaningful consent.

The shopping center owner, Cadillac Fairview halted the pilot project testing the technology once the Commissioners announced an investigation — after saying it saw no need to obtain consent since it was “not capturing or retaining images” and the “cameras do not record or store any photo or video content.”

On October 28, 2020, the Federal, Alberta, and BC Commissioners jointly issued a report of their findings. The regulators were critical of the way Cadillac Fairview had provided notice to shoppers during the facial detection pilot program, and of how it sought consumers’ consent.

The Commissioners noted that the images of individual faces that had been captured “through the cameras installed on the wayfinding directories are, in and of themselves, clearly personal information.”

In addition, the Commissioners confirmed that Cadillac Fairview had “collected and used personal information, including sensitive biometric information” but that it did not obtain meaningful or “valid consent and notice, for its collection and use of personal information.”

The Commissioners’ decision confirms PACC’s positionthat people’s faces are their personal information; and that obtaining meaningful and informed consent is necessary before applying facial detection or recognition technology. The ruling also supports PACC’s assertions that the momentary capture of facial images does indeed constitute the collection of personal information; and that the length of time a facial image is retained does not dismiss the obligation to obtain meaningful consent beforehand.

We commend Cadillac Fairview for halting its facial recognition pilot project and for having changed signage at mall entrances to provide better notice to the public; and the Commissioners for recommending that Cadillac Fairview ensure it obtains express opt-in consent before employing facial recognition technology or cease its use entirely.

As the voice for privacy and access, the Privacy and Access Council of Canada is a trusted voice for privacy, access, and data protection. PACC is devoted to advancing awareness of Access to Information, Protection of Privacy, Data Protection, and Information Governance, and to promoting ethical and sound practices, policies, and legislation.

Filed Under: Big Data, BIometrics-Genetics-DNA, Decisions, Facial Recognition, Privacy, Surveillance

Footer

PACC is the voice for privacy and access.

PACC is Independent  •  Non-profit  •  Non-partisan  •  Non-government

PACC is dedicated to the development and promotion of the access-to-information, information privacy, and data governance profession across the private, non-profit and public sectors.

PACC is the certifying body for access and privacy professionals, and engages in outreach efforts to advance awareness about access, privacy, and data protection.

Recent Posts

  • Guidelines 01/2021 on Examples regarding Data Breach Notification
  • Facial Recognition Cameras Here to Stay as Country’s Court System Entrenches Video Surveillance
  • IPC consultation on five-year strategic priorities under way
  • Info watchdog raps Privy Council Office for terminating access requests from public
  • A year to forget that’s worth remembering

© 2021 · Privacy and Access Council of Canada · Maintained by SLIcore Design.

We use cookies to ensure that we give you the best experience on our website. If you continue to use this site we will assume that you are happy with it.OkNoPrivacy policy