# Vending machine error reveals secret face image database of college students

Source: https://arstechnica.com/tech-policy/2024/02/vending-machine-error-reveals-secret-face-image-database-of-college-students
Kiwi News: https://news.kiwistand.com/stories/Vending-machine-error-reveals-secret-face-image-database-of-college-students?index=0x65da5f1f6e3264bedf5c4f38d197d757bfc7e472b2875546d579c083283ed4d9c4a069d3
Submitted by misha on 2024-02-24 UTC, 2 upvotes, 0 comments

## Summary

Invenda, the maker of smart vending machines, says its machines collect no user data or photos, after a machine error at the University of Waterloo led students to question whether they collect face images. An Invenda spokesperson said the software uses people detection and facial analysis rather than face recognition, and that the machines act as motion sensors that cannot capture, retain or transmit imagery. The company said it follows GDPR rules, and its press release described a $7 million funding round that included deals with Mars and Coca-Cola. Student Stanley told CTV News that some suspect the company is openly violating Canadian privacy law.

## Article

An Invenda spokesperson told Ars that “Invenda operates under strict policy and does not collect any user data or photos, ensuring individual identification via machine technology is unattainable. The software relies on people detection and facial analysis, not face recognition.”

“This means, people detection solely identifies the presence of individuals whereas, facial recognition goes further to discern and specify individual persons,” Invenda’s spokesperson said. “Additionally, the Invenda solution can only determine if an anonymous individual faces the device, for what duration, and approximates basic demographic attributes unidentifiably. The vending machine technology functions as a motion sensor, activating the purchasing interface upon detecting individuals, without the capability to capture, retain, or transmit imagery. Data acquisition is limited to assessing foot traffic at the vending machine and transactional conversion rates. These systems adhere rigorously to GDPR regulations and refrain expressly from managing, retaining, or processing any personally identifiable information.”

According to a press release from Invenda, Mars, the maker of M&M candies, was a key part of Invenda’s expansion into North America. It was only after closing a $7 million funding round, including deals with Mars and other major clients like Coca-Cola, that Invenda could push for expansive global growth that seemingly vastly expands its smart vending machines’ data collection and surveillance opportunities.

“The funding round indicates confidence among Invenda’s core investors in both Invenda’s corporate culture, with its commitment to transparency, and the drive to expand global growth,” Invenda’s press release said.

But University of Waterloo students like Stanley now question Invenda’s “commitment to transparency” in North American markets, especially since the confusion led some to suspect that the company is openly violating Canadian privacy law, Stanley told CTV News.

On Reddit, while some students joked that SquidKid47’s face “crashed” the machine, others asked if “any pre-law students wanna start up a class-action lawsuit?” One commenter summed up students’ frustration by typing in all caps, “I HATE THESE MACHINES! I HATE THESE MACHINES! I HATE THESE MACHINES!”

This story was updated on February 26 to include comments from Invenda.