Nacera Bekhat, CNIL: “Walking through a store aisle does not mean I have consented to data processing”

In 2024, complaints related to the retail sector represented 19% of all complaints received by the French Data Protection Agency (CNIL). As in-store data capture technologies multiply, powered by IoT via smart cameras or counting sensors near screens, screens, Nacera Bekhat, Head of the Digital Economy and Financial Sector at the CNIL, presents the current stakes for the retail sector.

Through Sophie Baqué. Published on 07 October 2025 à 22h56 - Update on 07 October 2025 à 23h13

Several vendors, like Veesion, provide smart camera technologies aimed at capturing customer data throughout the store to prevent theft. How do these systems fit with GDPR?

Some systems capture and analyse in real time people’s behaviour across all or almost all of the store to detect theft, and if needed, dispatch staff to handle the situation. The CNIL has considered that these systems cannot be deployed as they currently stand and require legal authorisation and legislative oversight. To authorise this type of in-store system, a law is needed with strong safeguards and allowing the exclusion of the objection right of customers (the associated bill is promoted by MP Paul Midy, former C.E.O. of Frichty and CMO of Jumia Group, Editor’s note). Indeed, we clearly see that these systems cannot work with an effective objection right given the pursued purpose (theft prevention).…

Read more

GDPR : French data protection agency fines La Samaritaine €100,000

After Bunnings, Kmart is criticised for use of facial recognition

After Asda and Currys, Sainsbury's tests facial recognition to lower theft

Shein accelerates growth in Europe in H1, despite a major financial penalty in France

Children's data: TikTok fined US$ 367 million in Ireland

17 consumer associations take Temu to task for non-compliance with the DSA