Walmart may collect biometric data such as facial recognition information from in-store camera systems or other services, and claims to obtain consent where legally required.
Shoppers in Walmart stores may have their facial geometry captured by in-store camera systems, and this biometric data is subject to a distinct and heightened legal protection regime under Illinois BIPA and Texas CUBI that provides consumers with private rights of action and statutory damages.
Cross-platform context
See how other platforms handle Biometric Identifier Collection and similar clauses.
Compare across platforms →Biometric data is among the most sensitive categories of personal information — it is permanent and cannot be changed if compromised — and collection of facial geometry in retail environments has generated some of the largest privacy class action settlements in U.S. history.
(1) REGULATORY FRAMEWORK: Illinois Biometric Information Privacy Act (BIPA, 740 ILCS 14/1 et seq.) requires informed written consent prior to biometric data collection, a publicly available retention and destruction policy, and prohibits sale or profit from biometric identifiers; enforced through a private right of action ($1,000 per negligent violation, $5,000 per intentional/reckless violation). Texas Capture or Use of Biometric Identifier Act (CUBI, Tex. Bus. & Com. Code §503.001) requires notice and consent; enforced by Texas AG with civil penalties up to $25,000 per violation. Washington Biometric Privacy Law (SB 1134) requires consent for commercial purposes. CCPA/CPRA classifies biometric data as sensitive personal information requiring opt-in consent for certain uses (Cal. Civ. Code §1798.121). (2)
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.