NewsVine_Mariyam
Diamond Member
So I'm familiar with various categories of data brokers and all of the data they have on us which we never gave permission for them to gather it, let alone sell and make millions off of said data. Long ago (decades ago) I began declining the various rewards and other cards offered at the different retail establishments for a specific reason. In retrospect It's kind of funny how I instinctively thought that signing up would not be a good idea for me, but never did I imagine it would involve all of this:
This is the part I find most interesting:
According to the KIRO 7 report, retailers and data brokers are increasingly using technologies that extend beyond in-store tracking. One example they highlighted was:
This isn't just about coupons or personalized ads. It implies:
This type of data fusion isn't explicitly illegal in many states, including Washington — unless biometric privacy laws (like Illinois’ BIPA) or strong ALPR laws are in place. But Washington does not yet have comprehensive consumer data protection laws like California or Colorado.
That’s why advocacy groups are pushing for things like the People’s Privacy Act, which would:
KIRO 7 Investigates: Loyalty discounts in exchange for your dataWash. — Consumer advocates are warning “loyal” grocery shoppers that scanning their loyalty cards at the checkout may be trading far more than they realize for discounts and rewards: their personal information is also fueling a lucrative industry worth hundreds of millions of dollars annually.
Kroger alone earned $527 million selling personal shopper information to data brokers in 2024 and could make $825 million from shopper profiles next year, accounting for 35% of the company’s total revenue, according to a Consumer Reports investigation.
“They’re making money off our data, and we have absolutely no control over what they get and how they use it,” said Herb Weisbaum, a consumer editor with Checkbook.org.
The data collection from grocery store apps extends far beyond your purchase history. Some apps also have the technology to track shoppers’ precise locations within stores, note languages spoken and employment information, and may also collect biometric data, such as facial recognition, according to privacy policies reviewed by KIRO 7.
“The game we’re playing here in America now is if you want the savings, you’ve got to be willing to give up your data,” Weisbaum said, adding that shoppers agree to some data surveillance when they “OK” the long privacy policies.
The Consumer Reports investigation also revealed that some shopper profiles collected by corporations contained significant errors, raising concerns about the accuracy of information being sold to third parties. State Rep. Shelley Kloba, D-District 1, has introduced House Bill 1671, the “People’s Privacy Act”, to give consumers rights over what information is collected and sold.
This is the part I find most interesting:
Facial Recognition + License Plate Matching
According to the KIRO 7 report, retailers and data brokers are increasingly using technologies that extend beyond in-store tracking. One example they highlighted was:This suggests a multi-layered surveillance system where your movements can be tracked from the moment you arrive:Matching a customer’s identity inside the store to their license plate in the parking lot.
How It Works (Based on Industry Practices)
- In-store video analyticscan use:
- Facial recognition
- Gait analysis
- Body measurements or clothing color
To build or confirm a biometric ID.
- Parking lot surveillance systems— particularly those installed by:
- Chain retailers
- Private security firms
- Property management companies
— may use automatic license plate recognition (ALPR) systems.
- Backend data correlation:
If a store (or its third-party vendor) has access to both in-store footage and parking lot camera feeds, or if it shares data with vendors who do, they may:- Link your license plate to your purchase activity
- Associate your identity or account with vehicle movement
- Track when and how often you visit
Why It Matters
This isn't just about coupons or personalized ads. It implies:- Behavioral profiling from the parking lot to the register
- Non-consensual surveillance beyond what most loyalty program terms disclose
- Potential downstream sale of sensitive data — including when, where, and how you shop — to insurers, advertisers, or others
Legal & Ethical Gray Area
This type of data fusion isn't explicitly illegal in many states, including Washington — unless biometric privacy laws (like Illinois’ BIPA) or strong ALPR laws are in place. But Washington does not yet have comprehensive consumer data protection laws like California or Colorado.That’s why advocacy groups are pushing for things like the People’s Privacy Act, which would:
- Grant individuals the right to know what’s being collected
- Opt out of surveillance and data sales
- Require clear disclosures for technologies like ALPR and facial recognition
