McDonald's AI Drive-Thru Allegedly Collected Biometric Customer Data without Consent, Violating BIPA
Date: 2021-10-15
Affected: Apprente, Mcd Tech Labs, Mcdonald's
Attack vector: other
Category: real-world
Severity: Critical

AI Incident Database (AIID) entry #360: McDonald's AI Drive-Thru Allegedly Collected Biometric Customer Data without Consent, Violating BIPA. Alleged deployer/developer: Apprente, Mcd Tech Labs, Mcdonald's. See the linked AIID entry for full narrative, sourcing, and classification.


Mitigations:

Architectural layers (MAESTRO):