This is a research prototype. The data and analyses are preliminary and not yet validated — we'd welcome your .
Calgary-area malls, including Chinook Centre and Market Mall, deployed MappedIn facial recognition software within digital directories to track shopper age and gender. The deployment occurred without customer notification or consent, leading to public concern regarding privacy and the potential for profiling. While the parent company, Cadillac Fairview, claimed the data was anonymized and not stored, privacy experts highlighted the lack of transparency and the risk of combining this data with other sources to create detailed consumer profiles.
Facial recognition (FRT) was reportedly deployed in some Calgary-area malls to approximate customer age and gender without explicit consent, which a privacy expert warned was a cause for concern.
Domain classification, causal taxonomy, severity scores, and national security assessments were LLM-classified and may contain errors.
AI systems that memorize and leak sensitive personal data or infer private information about individuals without their consent. Unexpected or unauthorized sharing of data and information can compromise user expectation of privacy, assist identity theft, or cause loss of confidential intellectual property.
Also classified as
The software was deployed secretly in the background of digital directories without any public notification or signage.
The incident involves the unauthorized tracking and inference of shoppers' demographic data (age and gender) using facial recognition software without their consent.
Human
Due to a decision or action made by humans
Intentional
Due to an expected outcome from pursuing a goal
Post-deployment
Occurring after the AI model has been trained and deployed
The privacy risk and lack of consent were caused by the intentional decision of mall management to deploy the facial recognition system post-deployment.
The unauthorized deployment of facial recognition software in Canadian malls by Cadillac Fairview highlights growing concerns over commercial biometric surveillance and privacy. While it does not pose a direct threat to physical or state security, it represents a notable challenge to civil liberties and societal privacy norms, requiring regulatory oversight.
The MappedIn software operated independently in the background of digital directories, automatically analyzing camera feeds in real-time to predict the age and gender of shoppers without human intervention.
High Risk: The report describes the use of facial recognition software in public retail spaces, which falls under biometric identification applications that have significant implications for fundamental rights and privacy.
The system's primary function was to use facial recognition technology to analyze shoppers' faces and predict their demographic characteristics, specifically age and gender.
The reports provide clear, consistent details about the deployment of the facial recognition software, the malls involved, the parent company's response, and the specific privacy concerns raised by advocates. There are no major conflicting accounts, and the technical function of the software is explicitly stated by both the mall and the software developer.
The mall argues that because images are not stored, no personal information is collected, meaning no privacy violation occurred. However, privacy advocates interpret the real-time biometric processing itself as a privacy violation.
Technology
Facial Recognition Software
MappedIn software ran in background of digital directories to track shoppers.
Accidental Interface Exposure
A browser window was left open, exposing the background tracking software.
Data Inputs
Biometric Data Processing
Directory cameras captured shoppers' faces to predict age and gender.
Lack of Data Verification
No independent way to verify that images were not being saved or stored.
Human Factors
No Shopper Consent
Shoppers were not given an opportunity to opt in or opt out of tracking.
Lack of Public Awareness
General public was unaware of being surveilled while using directories.
Process and Methods
No Privacy Impact Assessment
The mall operator failed to conduct or share privacy impact assessments.
Inadequate Notification Signs
Only generic CCTV signs were posted without explaining facial recognition.
Management
Prioritizing Tracking Over Privacy
Management deployed tracking to analyze behavior and improve experience.
Nondisclosure of Tech Use
Management kept software use proprietary and did not notify shoppers.
Regulatory Environment
Regulatory Loophole
Alberta's PIPA allowed tracking because images were not saved or stored.
Lack of Corporate Transparency
Private corporations are legally allowed to keep proprietary operations private.
AI system involved
Identified by automated extraction; can differ from the alleged developers above.
