Facial Recognition Trial by UK Southern Co-op Alleged as Unlawful

Southern Co-op's use of facial recognition reportedly to curb violent crime in UK supermarkets was alleged by civil society and privacy groups as "unlawful" and "complete" invasion of privacy.

Risk classification

• Primary risk domain: 2 Privacy & Security
• Primary risk subdomain: 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information

The incident involves the systematic collection and processing of shoppers' biometric data without their explicit consent, creating biometric profiles of every visitor.

Additional risk subdomains

• 7.3 Lack of capability or robustness: The report highlights widespread concerns regarding the accuracy of facial recognition software in correctly detecting criminals, which can lead to false positives.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The risk arises from the intentional decision by Southern Co-op management to deploy the facial recognition system in their stores after it was developed.

EU AI Act risk tier

• Risk tier: 2 High Risk

Risk Level 2: High Risk. The system uses live facial recognition for biometric identification in a retail environment, which falls under high-risk applications due to its significant implications for fundamental rights and privacy.

AI system and alleged parties

• AI system: Facewatch facial recognition, Hikvision surveillance cameras (Facewatch, Hikvision)
• AI purpose: Face Recognition; Smart Surveillance
• Behaviour type: Assistant
• Alleged developer: Hikvision
• Alleged deployer: Southern Co-op
• Alleged harmed parties: Souther Co-op customers

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Negligible, indirect Negligible
• Civil rights: direct Substantial, indirect Negligible
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Substantial, indirect Substantial
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Civil rights

Reported: Yes, the report explicitly describes a legal complaint alleging that the surveillance system infringes on the data rights and civil liberties of shoppers.

Directly caused: The deployment of live facial recognition biometric scanning directly affects the civil liberties of thousands of shoppers by subjecting them to automated surveillance without consent.

Inferred additional harm: It is likely that thousands of shoppers had their fundamental civil rights compromised through persistent, unconsented biometric profiling across the 35 stores.

Privacy

Reported: Yes, the report explicitly describes privacy violations, characterizing the system as 'dangerously intrusive, privatised spying' that processes sensitive personal data.

Directly caused: The system captures and processes the biometric data of every visitor to the 35 stores, creating biometric profiles without their consent.

Indirectly caused: The system potentially allows the sharing of biometric photos of 'subjects of interest' with other companies within an 8 to 46-mile radius.

Inferred additional harm: Thousands of shoppers are likely to have had their privacy expectations compromised through unauthorized biometric data collection and potential retention of non-watchlist photos.

People affected

• Occurrences reported: 1
• People reportedly exposed: 10000

Potential causes

Management

• Security Prioritised Over Privacy: Co-op deployed invasive tech primarily to reduce violence and theft.
• Inadequate Ethical Review: Management adopted controversial spying tech without broad community liaison.

Technology

• Inaccurate Criminal Detection: Widespread concerns exist over software accuracy in detecting criminals.
• Biometric Profiling: System creates biometric profiles of every visitor to the stores.
• Data Retention for Training: Non-suspect photos may be kept for days to improve the AI system.

Data Inputs

• Broad Watchlist Sharing: Biometric photos of subjects of interest are shared across retail networks.
• Lack of Shopper Consent: Shoppers have no way to opt out or consent to biometric scanning.
• Database of Known Offenders: System relies on matching shoppers against a database of past offenders.

Human Factors

• Reliance on Human Verification: Alerts must be validated by in-store staff, risking human error.
• Public Fear of Surveillance: Shoppers fear the normalisation of live facial recognition surveillance.

Process and Methods

• Invasive Data Processing: Processing of personal biometric data occurs without clear safeguards.
• Missing Safeguards in Practice: Key safeguards like opt-outs are often missing during deployment.

Regulatory Environment

• Outdated Legal Framework: Existing laws fail to keep pace with public expectations on facial recognition.
• Lack of Clear Legislation: No specific regulations govern the use of private live facial recognition.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide clear, consistent details about the deployment of the Facewatch system across 35 Southern Co-op stores, the legal complaint filed by Big Brother Watch, and the perspectives of both the campaigners and the co-operative. The role of the AI system is explicitly stated, and there are no major conflicting accounts of the physical deployment itself.
• Ambiguities identified: There is some ambiguity regarding whether non-watchlist shoppers' photos are actually retained for system improvement, as claimed by campaigners but denied by the technology provider.
• Alternative interpretations: The system could be viewed purely as a standard security tool rather than an invasive surveillance system, depending on the legal interpretation of GDPR compliance.

The deployment of live facial recognition technology by a UK supermarket cooperative sparked legal complaints over privacy and biometric data rights. While the involvement of Chinese state-owned Hikvision cameras is noted, the incident remains a localized commercial privacy dispute with negligible direct national security impact.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United Kingdom
• Alleged perpetrator: Southern Co-operative

Threat characteristics

• Imminence: Long-term. Represents an ongoing commercial surveillance deployment and regulatory debate rather than an immediate national security crisis.
• Autonomy: Human-supervised. The AI system flags potential matches autonomously, but store employees make the final decision to intervene or monitor shoppers.
• Novelty: Established threat. The use of facial recognition in commercial settings is an established technology with pre-existing legal and regulatory precedents.

Impact by dimension

• Physical security: Negligible. No threat to physical systems, critical infrastructure, or human safety is indicated in the incident details.
• Information security: Negligible. While Hikvision cameras are used, there is no evidence of intelligence compromise, classified data theft, or foreign state manipulation in this commercial deployment.
• Sovereignty: Negligible. The incident involves a private retail cooperative and does not impact state authority, electoral systems, or core government operations.
• Economic security: Negligible. No threats to financial systems, strategic technology theft, or critical supply chains are reported in this incident.
• Societal stability: Minor. The deployment of live facial recognition across 35 stores raises localized privacy and data rights concerns, but is manageable under existing national regulatory frameworks.