Concern over stadium FRT use
Consumer group CHOICE has once again revealed the (often undisclosed) use of facial recognition technology (FRT) in Australia. A new report from the group says this time it is major Australian stadiums that are failing to provide clear information on where and how the technology is being used. The practice raises concerns around data ownership, with sale of faceprint and other biometric data flagged as a potential outcome, leading to calls for legislative reform.
CHOICE has examined conditions of entry and privacy policy information for 10 specific stadiums and their operators, finding a lack of transparency around the use, storage and security of sensitive data in a number of venues.
“It is extremely concerning that facial recognition technology is being used at major concert and sporting venues across the country, without any kind of clear information for consumers about where, how and why it is being used,” said CHOICE consumer data advocate Kate Bower.
According to the organisation’s report, disclosure of the use of FRT is often buried deep within the terms and conditions of entry or privacy policy, meaning that ticketholders are not aware until after they have finalised their transaction. While some venues make it clear that FRT is used, CHOICE found it difficult to ascertain the intended use of that data in all cases.
“We’re particularly worried about Qudos Bank Arena, owned by Ticketek’s parent company TEG. Qudos is not clear on how and why they collect and use facial recognition data, leaving the door open for harmful selling and sharing of sensitive biometric information,” Bower said.
“Qudos can hold up to 21,000 people and is set to host a number of big events this year alone, including Lizzo, Sam Smith and Disney on Ice. The amount of biometric data that potentially could be collected, stored and shared just in 2023 is massive.”
The report said that Qudos claims to alert attendees on the use of facial recognition through digital signage and their conditions of entry. However, these signs are hard to find, difficult to read and would take an average reader over 12 minutes to get through. The signage doesn’t mention how the information is stored, shared or used.
CHOICE said it is urgently calling for stronger regulation of facial recognition to protect the community from harmful and invasive use of this technology.
“Stadiums are places where many people, including children, gather to have fun and make memories. If facial recognition is being used in these venues, people should have the choice to opt in or out. Instead, any details regarding the use of this technology are usually buried deep in a privacy policy or conditions of entry.
“Clear guidelines are needed to ensure safe and responsible use of facial recognition technology, and to hold businesses to account when they are using this controversial technology inappropriately or dangerously,” Bower said.
The organisation is calling on Australian consumers to have their say, encouraging them to sign a petition requesting the federal government to rein in the use of FTR.
The MediSecure breach thrusts the security spotlight back on service providers
Organisations have been confronting security risks in their supply chains for years, but a new...
Managing third-party cybersecurity risks in the supply chain
Third-party cybersecurity breaches occur when the victim's defences are compromised through a...
Countering MFA fatigue demands a rethink on user authentication
While MFA remains effective, highly motivated threat actors are using tactics that seek to...