A photo shared on Reddit showed one of the vending machines with an error code suggesting it used facial-recognition tech.
  • The University of Waterloo is expected to remove smart vending machines from its campus.
  • A student discovered an error code that suggested the machines used facial-recognition technology.
  • Vending Services said the technology didn’t take or store customers’ photos.
  • DevCat@lemmy.world
    16·
    9 months ago

    “What’s most important to understand is that the machines do not take or store any photos or images, and an individual person cannot be identified using the technology in the machines,” the statement said. “The technology acts as a motion sensor that detects faces, so the machine knows when to activate the purchasing interface — never taking or storing images of customers.”

    The statement said that the machines are “fully GDPR compliant,” referring to the European Union’s General Data Protection Regulation. The regulation is part of the EU’s privacy legislation that determines how corporations can collect citizens’ data.

    • quicksand@lemm.ee
      5·
      9 months ago

      So facial recognition in this case means that it can recognize that a face exists? No particular details but just a face? That’s a lot less egregious than I assumed from the headline. With all the AI stuff going on these days, I assumed it was some kind of data mining operation

    • pdxfed@lemmy.world
      5·
      9 months ago

      You gotta read through the carefully worded line toeing bullshit though; fingerprint readers on timeclocks no longer store fingerprint images but they can sure as fuck identify your finger. If operating similarly, it likely stores your face as a unique value, and can track unique purchases. Importantly, this can be sent to other machines to identify customers anywhere, and then of course, if that same technology is used in other machines, well shoot, any purchase you make at a vending machine is tracked to your face.

      The statement says individual purchases cannot be tracked to the individual but could be wordsmithing this with implication of anonymity but in actuality you’re tracked by a value. Also, if this were true why was this done so surreptitiously? They will claim I’m court an individual can’t be identified but of course once the technology is commonplace it would be only too easy for corps to join a data broker orgy and find out who’s who.

      I don’t know what is in the GDPR related to the above, but Cameras and storing pictures are old hat. Could be that carefully worded shit was because it’s not technically a picture of you and also because they’ll delete it upon request.