In September 2025, the OAIC determined that Kmart breached Australians’ privacy by deploying facial recognition technology to combat refund fraud — without notifying customers or obtaining consent. The device captured biometric data from every person entering 28 stores and at return counters, a sweeping collection the Commissioner found was disproportionate, intrusive, […]
Information Governance in the AI age
