Where your biometric data actually goes: privacy-by-design, explained

'So you're scanning everyone's face and keeping it?' It's the first question people ask about facial recognition. It's a fair one. The short answer is that unless you're on a venue's exclusion list, the system doesn't keep your biometric data or work out who you are. It checks, then forgets. That difference is what separates responsible technology from the surveillance people imagine.

Biometric data isn't a photo or CCTV

Biometric data isn't a photo. It isn't CCTV footage either. That's the first thing worth clearing up, because those are the two things people usually picture. What a facial recognition system works with is a measurement: it reads the geometry of a face, the distances and relationships between features, then turns that into a string of numbers called a template. It is still biometric information under the Privacy Act, which is why it has to be protected like the sensitive data it is rather than treated as anonymous.

If you're not on the list, your data goes instantly

It checks, then forgets.

This is the part that surprises people. Your template is checked against the venue's exclusion register in real time. If there is no match, it is discarded on the spot. You are not identified. No name is attached to you and no profile is built. The only biometric information the system keeps belongs to people on the exclusion register, who have been through a formal process and, in the case of self-exclusion, have asked to be identified for exactly this reason. When an exclusion ends, that record goes too.

Where the processing happens matters

Detection runs at the venue rather than streaming everyone's face to a distant cloud. Data is held in Australia, encrypted, with access limited to authorised staff. It never leaves the country.

What the system is not used for

This matters as much as what it does. It is never used for general surveillance, marketing, patron tracking, profiling or any commercial purpose. Nothing collected at a venue is shared with another venue. A match never triggers automatic action either; it raises an alert for a trained person, who confirms identity before anyone is approached. Any aggregate reporting a venue sees is anonymous and never linked to an individual.

Privacy-by-design isn't a feature you bolt on

The phrase 'privacy-by-design' means privacy is built into how the system works, not added as a setting afterwards. Discarding non-matches by default, keeping data in-country, collecting the minimum, deleting what is no longer needed: these aren't optional extras, they are the architecture. A system designed this way makes the private choice the automatic one, so good privacy doesn't depend on someone remembering to switch it on.

What a patron can ask for

The Australian Privacy Principles give people rights over their own information. You can ask a venue what it holds about you, ask for it to be corrected and make a complaint, first to the venue and then to the Office of the Australian Information Commissioner if you are not satisfied. Those rights apply to biometric information the same as anything else. Every venue running our system sets out the detail in its own privacy policy.

It's also what the rules now expect

This approach lines up with where regulation is heading. The NSW Code of Practice asks venues to complete Privacy Impact Assessments, store patron information securely, control access tightly then delete data when it is no longer needed, all underpinned by the Privacy Act 1988 (Cth) and the Australian Privacy Principles. Privacy-by-design isn't just good ethics; it is fast becoming the compliance baseline.

Why we build it this way

Ottica is built and maintained in-house in Australia, which means we know our own system end to end and can explain how it works in plain terms to a venue, a patron or a regulator. We think that transparency is the whole point. Facial recognition will only earn public trust if the people deploying it can show, not just say, that it respects the people it sees.

If you want the detail on how we handle data, our privacy and ethics approach spells it out.

Current as at July 2026. This article is general information, not legal advice.

Sources

Liquor & Gaming NSW — Code of Practice: Facial Recognition Technology in Hotels & Clubs. Lander & Rogers — NSW takes a governance-first approach to facial recognition technology.