What Coles and Woolworths Are Actually Testing

Australia's two largest supermarket chains, Coles and Woolworths, have confirmed they are testing facial recognition technology as part of a broader push to curb rising retail theft and violence against staff. The trials come amid growing pressure on retailers to protect employees from aggressive or repeat offenders, and reports indicate the systems work by capturing customer faces on camera and matching them against internal databases built to flag individuals with a history of violent or disruptive behavior in-store.

This isn't happening in a vacuum. Hardware retailer Bunnings previously fought and won a legal battle to keep using AI-powered facial recognition in its stores, overturning an earlier ruling that had found the practice breached privacy obligations. That precedent likely emboldened other major retailers to explore similar tools, and it signals that supermarket facial recognition in Australia may be moving from a fringe experiment to an industry norm faster than many shoppers realize.

What's notable is how quietly this has unfolded. There was no major public announcement, no opt-in campaign, just confirmation that testing has taken place after industry reporting brought it to light. That pattern, quiet trials followed by public discovery, is exactly what fueled the backlash captured in the satirical cartoon that sparked debate over Coles and Woolworths' facial recognition plans, which used humor to highlight just how uneasy many Australians feel about being scanned without clear warning.

Privacy Risks: Data Retention, Function Creep, and Accuracy Bias

Facial recognition in retail settings raises a familiar set of concerns that go well beyond catching shoplifters. The first is data retention: once a face is captured and stored in a database, how long does it stay there, who can access it, and under what circumstances is it deleted? Retailers testing these systems have not published detailed retention schedules, leaving shoppers to guess how long their biometric data might sit on a company server.

The second concern is function creep, the tendency for a technology introduced for one narrow purpose (identifying repeat violent offenders) to expand into broader uses like tracking loyal customers, profiling shopping habits, or sharing data with third parties. Once the infrastructure exists, the incentive to use it more broadly tends to grow.

Third, accuracy and bias remain persistent technical problems with facial recognition systems generally. Misidentification can lead to innocent shoppers being wrongly flagged, and errors have historically been more common for certain demographic groups. In a supermarket setting, a false match could mean a customer is confronted or denied service based on a system error, not an actual incident.

How Australia's Privacy Laws Address (or Fail to Address) Retail Biometrics

Australia's privacy framework has struggled to keep pace with biometric technology deployed in everyday commercial spaces. The Australian Privacy Commission has already cautioned retailers testing facial recognition, signaling that regulators are watching closely even though clear, binding rules specific to retail biometrics remain limited. The Bunnings case demonstrated that legal outcomes in this space can shift, with an earlier finding against the retailer later overturned, leaving the regulatory picture unsettled rather than settled.

This creates a gap: retailers can trial and even deploy facial recognition while formal guidance is still catching up. For shoppers, that means the burden of understanding what's happening often falls on the individual rather than being clearly disclosed by the business collecting the data.

What This Means For You

If you shop at Coles or Woolworths, or any retailer experimenting with facial recognition, it's worth understanding that your image could be captured and analyzed without an explicit, individual prompt for consent. Store signage, if present, is often the only notice given. This doesn't mean panic is warranted, but it does mean informed awareness matters.

Practical steps include checking store entrances and customer service areas for signage disclosing camera and facial recognition use, reviewing a retailer's published privacy policy for details on biometric data handling, and contacting the retailer directly to ask how long facial data is retained and whether you can request deletion. Consumers can also lodge inquiries or complaints with Australia's privacy regulator if they believe a retailer's practices fall short of transparency expectations.

Actionable Takeaways

Before your next shop, take a few minutes to look for privacy notices in-store and check whether your regular supermarket has published details on its facial recognition testing. Ask staff or contact customer service if you want clarity on data retention and opt-out options. And if you're skeptical about how these trials have been rolled out with little public consultation, you're not alone. Public reaction, including the satirical response to the Coles and Woolworths facial recognition trials, suggests many Australians already feel uneasy about biometric surveillance becoming a routine part of grocery shopping. Staying informed, asking questions, and knowing your rights are the most practical ways to push back before supermarket facial recognition in Australia becomes the unquestioned default.