5 data and privacy things you need to know

1. Facial recognition is being used at some supermarkets across the motu

In 2022, we alerted readers to the use of facial recognition technology (FRT) at some Foodstuffs supermarkets in the North Island. The AI-powered tech can identify individuals by analysing their facial features and comparing them to a database to find a matching individual. Foodstuffs stopped using the technology following our report, but began trialling a new FRT system in February 2024.

We’re concerned FRT is an unnecessary intrusion into people’s privacy when they’re shopping, especially when its use isn’t adequately disclaimed. We’re also worried that FRT might unfairly discriminate against Māori and Pasifika populations. If you’re as concerned about supermarkets’ use of this technology as we are, make sure you read their privacy policies and keep an eye out for signs notifying you if the tech is in use.

2. Ancestry companies can use your data to guess your religion or sexuality

Ancestry DNA tests are a popular way to dig a little deeper into your family tree, but to access the service you’ve got to hand over your most personal data – your DNA. It means that businesses like Ancestry.com can use your data to make educated guesses about your sensitive information, such as your religion or sexuality, even where you didn’t offer this information voluntarily.

Our article outlines the basics of three major DNA ancestry testing companies’ privacy policies. If connecting with your whānau this way is something you’re interested in, make sure you’re familiar with what to check before you spit.

3. Some period tracker apps’ privacy policies state they can share your data with law enforcement

Using an app like Flo or Clue can make tracking your period easy. You can also log symptoms and sexual activity, as well as track ovulation. The downside? Some apps may reserve the right to share information with law enforcement. While this is a bigger issue in jurisdictions where abortion is illegal, it’s worth reading the privacy policy to know what data is being collected before you log your period.

We recommend you avoid signing up with a social media account and, if the app allows, opt out of tracking and its ability to sell your data or use it for research. If you’ve got a period tracker app you no longer use, make sure you delete it and its data.

4. Westfield malls use facial detection software for targeted advertising

In a similar vein to Foodstuffs’ trial, we investigated Westfield malls using digital billboards equipped with facial detection software. That’s right, those billboards, named SmartScreens, can serve you adverts based on your gender and age. The technology can even predict whether you’re feeling very happy, very unhappy, or somewhere in between.

While Westfield include the use of SmartScreens in its privacy policy, we think these companies need to be more transparent and clearly inform consumers upon entry to malls. Until then, be mindful that you might see ads based on your age and gender.

5. Property managers might illegally be collecting more data than they should

In 2022, we conducted a nationwide mystery shop of property managers to see if they complied with the Privacy Act and guidance issued by the Office of the Privacy Commissioner. Even though the guidance states landlords can only collect personal information in ways that are lawful, fair, and not unreasonably intrusive, our investigation uncovered 10% of agents encouraged our mystery shoppers to provide more information than necessary. After our mystery shoppers asked about the privacy and security of their information, 14% of property managers showed a noticeable lack of interest.

If you’re on the hunt for a rental, don’t feel pressured to give up personal information about your gender, age, political opinion, family status, or employment status. You should never be asked to provide a bank statement for your spending habits to be reviewed. Read the article to see more examples of what isn’t needed to apply for a tenancy.