Target collects biometric information from consumers, which may include facial geometry or other physical identifiers used in store security or other applications.
Biometric data is among the most sensitive categories of personal information because it is permanent — you cannot change your fingerprint or face — and its misuse carries serious identity and safety risks.
Biometric data collection implicates Illinois BIPA, Texas CUBI, Washington's biometric law, and CCPA/CPRA sensitive data provisions; organizations must ensure compliant notice, consent, and retention/destruction schedules and should audit whether biometric data is included in any third-party data sharing arrangements.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Target collects a wide range of personal data including your precise location, purchase history, browsing behavior, and inferences about your preferences, which it uses for targeted advertising and shares with third-party partners. This means your shopping behavior may be used to build a detailed profile that influences the ads you see across the internet. You can opt out of the sale or sharing of your personal information by visiting Target's privacy preference center at https://www.target.com/c/target-privacy-policy/-/N-4sr7p.