Lawyers Denied Entry to Performance Venue by Facial Recognition

Lawyers were barred from entry to Madison Square Garden after a facial recognition system matched them as employed by a law firm currently engaged in litigation with the venue.

Risk classification

• Primary risk domain: 1 Discrimination & Toxicity
• Primary risk subdomain: 1.1 Unfair discrimination and misrepresentation

MSG used facial recognition to systematically target and treat a specific group of people (adversarial attorneys) unequally, resulting in their exclusion from public venues.

Additional risk subdomains

• 2.1 Compromise of privacy by obtaining, leaking or correctly inferring sensitive information: The system scanned the biometric data of thousands of venue attendees without their explicit consent to identify matches.

Causal factors

• Entity: Human
• Intent: Intentional
• Timing: Post-deployment

The exclusion of attorneys was a deliberate policy decision made by MSG management, which was then enforced post-deployment using facial recognition technology.

EU AI Act risk tier

• Risk tier: 2 High Risk

High Risk: The reports describe the use of facial recognition, a biometric identification system, in public spaces. Under the EU AI Act, 'Law enforcement applications, including facial recognition' and real-time biometric identification systems in publicly accessible spaces are classified as High Risk.

AI system and alleged parties

• AI system: unspecified facial recognition system
• AI purpose: Face Recognition; Identification
• Behaviour type: Tool
• Alleged developer: unknown
• Alleged deployer: Madison Square Garden Entertainment
• Alleged harmed parties: Kelly Conlon, Alexis Majano

Harm severity

Severity ratings are based on this scale.

Highest direct severity in any category: Substantial. Severity is scored from Negligible to Catastrophic in each harm category, for harm the reports describe as caused directly or indirectly by the AI system.

• Physical: direct Negligible, indirect Negligible
• Infrastructure: direct Negligible, indirect Negligible
• Property: direct Negligible, indirect Negligible
• Financial: direct Negligible, indirect Negligible
• Environmental: direct Negligible, indirect Negligible
• Malicious content: direct Negligible, indirect Negligible
• Differential treatment: direct Minor, indirect Negligible
• Civil rights: direct Negligible, indirect Minor
• Democracy: direct Negligible, indirect Negligible
• Privacy: direct Substantial, indirect Negligible
• Psychological: direct Negligible, indirect Negligible
• Epistemic: direct Negligible, indirect Negligible
• Child sexual exploitation and abuse: direct Negligible, indirect Negligible

Differential treatment

Reported: Yes, the reports explicitly describe differential treatment of attorneys.

Directly caused: Attorneys working for law firms with active litigation against MSG were singled out, scanned, and denied entry to public entertainment venues solely based on their employment status.

Inferred additional harm: This policy creates a systemic disadvantage for attorneys at targeted firms, potentially discouraging them from taking on legitimate cases against MSG to avoid personal blacklisting.

Civil rights

Reported: Yes, the reports describe potential violations of civil rights and the right to free speech/access to justice.

Directly caused: The ejections potentially violated New York civil rights laws prohibiting the 'wrongful refusal of admission' to places of public entertainment.

Indirectly caused: The policy has a chilling effect on the First Amendment right to access justice, as attorneys might decline representation to avoid being banned from major venues.

Inferred additional harm: Widespread deployment of such systems by private corporations could lead to broader civil rights violations, enabling powerful entities to retaliate against critics, journalists, or legal adversaries.

Privacy

Reported: Yes, the reports describe privacy violations from biometric scanning.

Directly caused: MSG scanned the faces of thousands of patrons without explicit consent and matched them against databases compiled using photos harvested from public law firm websites.

Inferred additional harm: The permanent compromise of biometric data for thousands of individuals, which cannot be changed if leaked or misused.

People affected

• Occurrences reported: 4
• People reportedly harmed: 4
• People reportedly exposed: 900

Potential causes

Management

• Retaliatory Use of Technology: CEO used surveillance tech to target and exclude legal adversaries.
• Prioritizing Grievances: Deploying security tools for corporate retaliation rather than safety.
• Disregard for Legal Warnings: Management ignored State Liquor Authority and court warnings about bans.

Technology

• Real-time Biometric Tracking: Real-time facial recognition analyzes surveillance feeds to spot targets.
• Algorithmic Bias Risk: FRT has documented higher error rates for women and people of color.
• Repurposing of Security Tech: Systems meant for public safety were adapted to enforce private bans.

Data Inputs

• Scraping of Public Photos: Target database populated using headshots scraped from law firm websites.
• Lack of Biometric Consent: Biometric data collected and scanned from crowds without opt-in consent.
• Inadequate Data Verification: No robust verification if the target still works at the banned firm.

Human Factors

• Over-reliance on Auto Matches: Security guards acted on FRT alerts without independent verification.
• Lack of Public Awareness: Patrons unaware of the extent of tracking despite venue signage.

Process and Methods

• Collective Punishment Policy: Banning entire firms instead of individuals involved in litigation.
• Lack of Appeal Mechanisms: Banned individuals had no immediate way to dispute their exclusion.
• Ineffective Ticket Screening: No system to prevent banned attorneys from buying tickets initially.

Regulatory Environment

• Absence of Federal FRT Law: No federal regulations exist to govern private sector facial recognition.
• Patchwork State Regulations: Varying state laws allow unrestricted FRT use in New York.
• Lack of Private Sector Oversight: Regulatory gaps allow private entities to use FRT for non-security goals.

Information quality

• Classification confidence: High
• Reason for confidence: The reports provide consistent, detailed, and corroborated accounts of multiple specific attorneys being ejected from MSG venues using facial recognition. MSG itself explicitly confirmed the policy and the use of the technology, leaving no doubt about the core facts of the incident.
• Ambiguities identified: The specific vendor of the facial recognition software used by MSG is not confirmed, and the exact size of the blacklist is estimated rather than precisely stated.
• Alternative interpretations: MSG frames the incident as a standard property-rights and security enforcement issue rather than a surveillance or civil rights violation.

Madison Square Garden Entertainment used facial recognition technology to identify and eject attorneys from its venues who worked for firms engaged in litigation against the company. This incident represents a minor national security concern, primarily impacting societal stability and civil liberties through localized privacy violations and corporate retaliatory surveillance, which is being managed through standard regulatory and legal channels.

• Overall national security impact: Minor
• Scope: Single nation
• Primary target: United States
• Alleged perpetrator: Madison Square Garden Entertainment

Threat characteristics

• Imminence: Long-term. Represents an ongoing debate and regulatory concern regarding private surveillance rather than an active national security crisis.
• Autonomy: Human-supervised. The AI system automatically identified targets, but human security personnel made and executed the final decision to eject them.
• Novelty: Evolved capability. Utilizes established facial recognition technology but applies it in a novel, retaliatory corporate enforcement context.

Impact by dimension

• Physical security: Negligible. No physical security threats, kinetic attacks, or critical infrastructure compromises were reported in connection with this commercial venue incident.
• Information security: Negligible. The incident did not involve information warfare, intelligence compromise, or state-sponsored disinformation campaigns.
• Sovereignty: Negligible. While the policy targeted attorneys involved in active litigation, it did not disrupt core government operations, electoral systems, or state sovereignty.
• Economic security: Negligible. No strategic technology theft, financial system attacks, or significant threats to national economic security were identified.
• Societal stability: Minor. The incident represents a minor, localized threat to civil liberties and privacy, involving the non-consensual biometric scanning of venue patrons to enforce a corporate blacklist.