The University of Waterloo (UWaterloo) has decided to take down 29 vending machines from its campus after students expressed their concerns about the use of facial analysis software by the machines. The software, developed by a Swiss company called Invenda, was supposed to detect when a person was standing in front of the machine and switch from displaying ads to products. However, some students noticed an error message on one of the machines that revealed the name of the software: Invenda.Vending.FacialRecognition.App.exe.
How the issue came to light
The issue was first brought to attention by a Reddit user with the handle SquidKid47, who posted a photo of the error message on the UWaterloo subreddit on February 15, 2024. The post sparked a discussion among other users, who questioned why the vending machines needed such software and whether it was collecting and storing any personal data. Some users also pointed out that there was no indication or consent form on the machines that informed the customers about the software.
One of the students who commented on the post was River Stanley, a fourth-year computer science and business student and a writer for the campus journal mathNEWS. Stanley decided to investigate the matter further and contacted the vending machine operator and Invenda. He wrote an article for mathNEWS that exposed the details of the software and the company behind it. His article was later picked up by CTV Kitchener and other media outlets.
What the software does and why it is problematic
According to Invenda, the software is not facial recognition, but facial analysis, which means it does not identify or match individual faces, but only estimates the age and gender of the customers. The company claims that the software does not store any data or photos, and that it is only used to improve the customer experience and the product selection. The company also says that the software is compliant with the European Union’s General Data Protection Regulation (GDPR) and the Canadian Personal Information Protection and Electronic Documents Act (PIPEDA).
However, critics say that the software is still invasive and unnecessary, and that customers should have the right to know and opt out of it. They argue that facial analysis is a form of biometric data collection, which can reveal sensitive information about a person’s identity, preferences, and emotions. They also question the accuracy and reliability of the software, and the potential risks of data breaches and misuse. Moreover, they point out that the software violates the privacy policy of the University of Waterloo, which states that “the University will not collect personal information by surveillance, whether by camera, audio recording, or other means, unless authorized by law or approved by the University Secretary.”
How the university and the students reacted
The University of Waterloo said that it was unaware of the software until the students raised the issue, and that it immediately asked for the removal of all 29 Invenda vending machines from the campus. The university also said that it thanked the students for bringing the matter to its attention, and that it was reviewing its procurement process to prevent such incidents from happening again.
The students, on the other hand, expressed their dissatisfaction and disappointment with the university’s response, and demanded more transparency and accountability from the administration. They also called for more awareness and education on the ethical and social implications of facial analysis and other emerging technologies. Some students also suggested that the university should adopt a more proactive and critical approach to technology, and that it should involve the students and the faculty in the decision-making process.
