Case

Bunnings Group Limited and Privacy Commissioner (Guidance and Appeals Panel) (2026)

Between 6 November 2018 and 30 November 2021, Bunnings Group Limited used facial recognition technology across some of its stores in Australia and New Zealand to identify individuals considered to be a security risk. CCTV footage of all individuals entering stores was scanned against a risk database, with alerts issued to staff where matches occurred. Non-matched facial data was deleted almost immediately.