What happened
Bunnings Group ran a facial recognition system from Hitachi Kokusai Electric in 62 stores in New South Wales and Victoria from January 2019 to 30 November 2021. CCTV cameras captured the faces of people entering, and the system compared them with a database of known offenders and alerted staff to matches. In October 2024 the Privacy Commissioner found that Bunnings had breached privacy law. On review, the Administrative Review Tribunal found on 4 February 2026 that the system, with other security controls, was effective and suitable to identify known offenders. It relied on an expert engaged by Bunnings who compared stores with and without the system and estimated that it cut theft by around 13%. The Tribunal found that the system was far more effective than people watching CCTV and that staff reviewed false matches before acting. It noted that cause and effect is difficult to test. It upheld the findings that Bunnings breached the principles on notice, privacy practices and privacy policy.
Sources
-
Regulatory document, by authors with no tie to the system.
I do not doubt that the FRT system was more accurate, practical and cost effective than some of the alternative tools and strategies available to the respondent to take appropriate action in respect of certain instances of unlawful activity
-
Court document, by authors with no tie to the system.
Administrative Review Tribunal of Australia, Guidance and Appeals Panel (Deputy President P Britten-Jones, Senior Members A Murphy and T Simon). Bunnings Group Limited and Privacy Commissioner (Guidance and Appeals Panel) [2026] ARTA 130, 4 February 2026 (archived copy from AustLII).
We find that collecting sensitive information by the use of FRT in conjunction with the other security controls was effective and suitable to identify known offenders and if necessary to monitor them so as to reduce the likelihood of them engaging in theft or violent or threatening behaviour.
Details
AI system
- Workflow
-
CCTV cameras at store entrances captured the faces of people entering. The system converted each face to a vector set and compared it with those of enrolled offenders. A member of Bunnings' investigations team reviewed each match before staff acted.
Follow-up
- Conditions for replication
-
Faces must be visible, since masks or other people blocking the view defeat the match. Offenders must be enrolled in the database for the system to flag them.
Entry details
- Sector
-
Retail security.
- Purpose
-
Hitachi Kokusai Electric built the facial recognition system to match faces captured on CCTV against a database of enrolled persons and alert staff to matches.
Not yet checked: model, release, provider, role, configuration, inputs and outputs, autonomy, human oversight, beneficiaries, reach, distribution and access, duration, every measurement question, every money question, ownership and control, dependencies, cross-border connections, geopolitical implications, replication attempts, availability, institutional decision, grounds, action and result, success criterion, every evidence question, observed or intended, alternative assessments, related entries, other identifiers, category mappings.
Cite this record
Peter H. Vartanian. (2026). Facial recognition helped Bunnings spot repeat offenders in 62 stores (AIBD-0856). Artificial Intelligence Benefits Database, edition of 31 October 2026. https://petervartanian.xyz/aibd/records/AIBD-0856.html (archived at https://doi.org/10.7910/DVN/AADSII, version 4.0)