Walk into certain Coles or Woolworths stores lately and a camera near the entrance may have already scanned your face before you reach the trolleys. Facial-recognition trials by the two supermarket giants have sparked warnings about privacy, mistaken identities, and the gradual expansion of mass surveillance, raising a question many shoppers haven't had to consider before: is your supermarket scanning your face, and what happens to that data afterward?

This isn't just a technology curiosity. It's a live test of how much biometric monitoring Australians will accept in the course of an ordinary grocery run, and the answers matter for anyone who shops at either chain.

What Coles and Woolworths Are Actually Testing

Both retailers have confirmed they trialled facial-recognition cameras at store entries, technology designed to capture the faces of customers as they walk in. The stated purpose behind these systems is typically loss prevention: identifying repeat shoplifters or people flagged for past incidents before they reach the shop floor. We covered the initial rollout in detail when Coles and Woolworths began trialling facial recognition at entry, and the backlash that followed once shoppers realised what was happening is documented in our report on how Coles and Woolworths facial recognition tests sparked alarm.

The key detail for shoppers is that these systems don't just take a photo. Facial recognition works by converting your face into a mathematical template, a biometric identifier that can be stored, matched against other images, and potentially shared. Unlike a password, you can't change your face if that data is ever misused or exposed.

The Privacy Risks: Mistaken Identity and Data Retention

The most immediate concern raised by privacy advocates is accuracy. Facial-recognition systems can and do misidentify people, flagging innocent shoppers as suspects because their features loosely match someone in a database. Being wrongly stopped, questioned, or refused entry over a false match is not a hypothetical risk, it's a documented failure mode of this technology wherever it's been deployed at scale.

Then there's the question of what happens to your data once it's captured. How long is a facial template retained? Is it deleted if you're never flagged as a match? Is it stored on local servers or sent to a third-party vendor? These are exactly the kinds of details that tend to stay vague in early-stage retail trials, and vague retention policies are a red flag in their own right. Biometric data that sits in a database indefinitely is a growing liability, both for the company holding it and the customer whose face it represents.

How This Fits Into Everyday Consumer Surveillance Creep

Supermarket facial recognition doesn't exist in isolation. It's part of a broader pattern where cameras, loyalty apps, and in-store sensors are gradually normalising biometric and behavioural tracking as a routine part of shopping. Each individual trial can be framed as a modest, narrowly scoped security measure. But taken together, these deployments represent a steady expansion of surveillance infrastructure into spaces that were previously anonymous.

This is the core worry behind the warnings that accompanied the Coles and Woolworths trials: not that any single camera is catastrophic, but that consent is rarely sought, disclosure is often minimal, and once the infrastructure is in place, it tends to expand rather than retract. A trial framed around catching shoplifters today can quietly become a broader customer-tracking tool tomorrow if oversight is weak.

Can You Opt Out, and What Are Your Rights as a Shopper?

In practice, opting out of facial recognition at a supermarket entrance is difficult. Signage disclosing the cameras, where it exists, is often small and easy to miss, and walking away from your local supermarket isn't a realistic option for most people. That said, shoppers do have some leverage:

  • Ask staff directly whether facial-recognition cameras are active in the store and what the retailer's stated policy is on data retention.
  • Look for signage at entrances, retailers are generally expected to disclose the use of surveillance technology, even if the notice is small.
  • Raise concerns through the store's customer service channels or a formal complaint, since public pressure has already prompted both Coles and Woolworths to publicly address their trials.
  • Support and follow consumer and privacy advocacy groups tracking these rollouts, since regulatory scrutiny is often what forces retailers to clarify or scale back biometric programs.

What This Means for You

If you shop at Coles or Woolworths, you may already be walking past a facial-recognition camera without realising it. The technology itself isn't necessarily malicious, retailers frame it as a security tool, but the lack of clear consent, the risk of misidentification, and unclear data retention practices are legitimate reasons for caution. Supermarket facial recognition privacy isn't an abstract policy debate, it's a practical issue that affects anyone doing a weekly shop.

The responsible move as a shopper is to stay informed rather than alarmed. Ask questions when you see a camera near a store entrance, pay attention to how retailers respond to public pressure, and treat vague answers about data retention as a reason to push for more transparency, not less. Facial-recognition trials tend to expand quietly when nobody asks questions, and shrink when enough people do.