Compliance lessons from Rite Aid facial recognition case
By 
Adrianne Appel2024-01-04T20:11:00
The Federal Trade Commission (FTC) was clear in its recent enforcement action against Rite Aid regarding its expectations for companies using facial recognition technology or any biometric security or surveillance systems.
The FTC filed a complaint against Rite Aid on Dec. 19, alleging the retail pharmacy chain used untested, inaccurate facial recognition technology to secretly surveil shoppers from 2012-20.
The misused technology resulted in thousands of people being misidentified as shoplifters, with a higher percentage of women, Blacks, Latinos, and Asians wrongly accused. Rite Aid staff sometimes harassed and publicly humiliated innocent shoppers and forced them to leave stores, including those who had wanted to fill necessary prescriptions, the FTC said.
Related articles
-
PremiumEthical compliance for facial recognition technology
The lack of clear regulations and guidelines for the ethical use of facial recognition technology further exacerbates concerns of discriminatory practices and potential infringements on human rights.
-
News BriefRite Aid gets 5-year facial recognition use ban from FTC
Retail pharmacy chain Rite Aid agreed to a five-year ban on its use of facial recognition technology for surveillance purposes as part of a settlement with the Federal Trade Commission.
-
News BriefFTC warns businesses to risk assess uses of biometric technologies
Businesses that make false or unsubstantiated claims regarding facial recognition and other biometric technologies could face enforcement from the Federal Trade Commission, the agency warned in a policy statement.
More from Regulatory Enforcement
-
ArticleFormer startup CEO gets 7 years in prison for $175M fraud against JPMorgan Chase
Charlie Javice, a former CEO who duped JPMorgan Chase into purchasing her start up company for $175 million, has been ordered to forfeit more than $22 million by the Department of Justice (DOJ) and to spend 7 years in jail.
-
ArticleGeorgia Tech to pay $875,000 for allegations brought by compliance officers
Georgia Tech Research Corp. (GTRC) has agreed to pay $875,000 to settle allegations first raised by two compliance officers that its cybersecurity protocols violated acceptable standards for defense contractors, the Department of Justice (DOJ) said.
-
ArticleTractor Supply Company hit with $1.35M fine for alleged California privacy violations
Tractor Supply Company has agreed to get into compliance with California’s consumer privacy law and to pay a $1.35 million fine—the largest yet by California—to settle allegations it violated the privacy rights of customers and job applicants.