{"schema_version":"0.10.0","id":"LR-2026-0327","record_version":1,"title":"Facial recognition watchlist error leads to wrongful shoplifting accusation at a Cardiff retail park","verification":{"human_verified":false,"method":"automated_gate","auto_verified":true,"score":46.6,"score_breakdown":{"source_authority":12.1,"independent_corroboration":7.0,"implicated_party_confirmed":0.0,"citation_integrity":14.0,"specificity":3.0,"completeness":3.2,"unhedged_language":5.0},"checks":{"schema_valid":true,"every_field_cited":true,"quotes_verbatim":true,"source_fetched":true,"distinct_incident":true,"dates_plausible":true,"sources_agree":true,"source_describes_incident":true,"severe_backed_by_source":true,"record_integrity":true,"eligible":true,"about_this_case":true},"gate_version":"gate-2026-10-18.7","cross_check_model":null,"cross_check_agreement":null,"duplicate_of":null,"verified_by":null,"verified_at":"2026-11-01","extraction_run_id":null,"evidence_level":{"level":"preliminary","reason":"1 report: BBC · subject to change","original_document":null,"reports_total":1,"reports_independent":1,"reports_derivative":0,"developing":false,"disputed":false,"rules_version":"evidence-2026-10-29.1","computed_at":"2026-11-01","history":[{"date":"2026-11-01","from_level":null,"to_level":"preliminary","reason":"1 report: BBC · subject to change"}]},"sources_hash":"a4055a2d83a05a5b804d053a6c21a63b76fae5ad9847d3a55bc75a64d8c0aeb9"},"system":{"model_name":null,"model_version":null,"developer":"Facewatch","harness":null,"tools_granted":[],"permissions_scope":null,"autonomy_level":"unknown","guardrails_present":[],"deployment_context":"unknown","tier":null,"lifecycle_stage":null,"integration_type":null,"intended_use":"to help protect store colleagues from incidents of aggressive shoplifting","safeguard_state":null,"production_intended":null},"event":{"date_occurred":null,"date_disclosed":"2025-11-20","incident_class":"operational_error","failure_class":null,"agent_involved":null,"secondary_failure_classes":[],"trigger":"unknown","duration":null,"detection_method":"unknown","summary":"A B&M store at Cardiff Bay Retail Park used the Facewatch facial recognition system, which matches faces entering a premises against known offenders and sends an alert to staff to review. Byron Long, 66, was added to a watchlist and told to leave the store, accused of stealing £75 of goods on a previous visit. The accusation was wrong. Facewatch said the case was human error and not a failure of the technology, and B&M also called it human error. The accusation was overturned when a review of CCTV footage showed Mr Long had paid for his shopping and taken nothing. B&M apologised and offered a £25 voucher, which Mr Long rejected. Big Brother Watch made a complaint to the Information Commissioner's Office on his behalf, and B&M confirmed his data had been removed. Mr Long said his mental health worsened after the incident.","tags":[],"date_detected":null,"near_miss":null,"root_cause":null,"root_cause_detail":null,"failure_class_detail":null,"responsible_party":null,"adversarial_actor":null,"input_provenance":null,"time_to_contain":null,"operations_paused":null,"remediation":"Mr Long's data removed","precursor_events":null},"impact":{"direct_loss_usd":null,"remediation_hours":null,"records_exposed":null,"third_parties_affected_count":null,"severity":"moderate","severity_because":"Test: data of others touched with a bounded scope stated. The source states one individual's data was deleted after the retailer informed the company.","harm_class":[],"affected_description":null,"protected_class_involved":null,"data_categories_exposed":[],"loss_range_usd":null,"reversibility":null,"downstream_exposure_count":null},"evidence":{"sources":[{"url":"https://www.bbc.co.uk/news/articles/c3vn4p1lwqno","publisher":"BBC","date":"2025-11-20","type":"press","title":"Cardiff man wrongly accused of shoplifting in B&M in facial recognition error - BBC","archived_url":null,"attachment":"first_report","independence":"independent"}],"per_field_confidence":{"system.developer":"C","system.intended_use":"C","event.remediation":"C","context.country":"C","event.incident_class":"D","impact.severity":"D","impact.severity_because":"D","event.summary":"C","system.autonomy_level":"D","system.deployment_context":"D","event.trigger":"D","event.detection_method":"D","event.date_disclosed":"D","context.denominator_available":"D"},"field_citations":{"system.developer":[{"source_index":0,"quote":"Facewatch is a private company whose facial recognition system is used by retailers across the UK."}],"system.intended_use":[{"source_index":0,"quote":"They said reported incidents like this were rare and \"Facewatch services are designed to operate strictly in compliance with UK GDPR and to help protect store colleagues from incidents of aggressive shoplifting\"."}],"event.remediation":[{"source_index":0,"quote":"B&M confirmed that Mr Long's data has now been removed."}],"context.country":[{"source_index":0,"quote":"Facewatch is a private company whose facial recognition system is used by retailers across the UK."}],"event.incident_class":[{"source_index":0,"quote":"\"This was a simple case of human error, and we sincerely apologise to Mr Long for any upset caused,\" a spokesperson said."}],"impact.severity":[{"source_index":0,"quote":"Our system worked exactly as it should, and as soon as we were informed by the retailer, the individual's data was immediately deleted in line with our strict procedures."}],"impact.severity_because":[{"source_index":0,"quote":"Our system worked exactly as it should, and as soon as we were informed by the retailer, the individual's data was immediately deleted in line with our strict procedures."}],"event.summary":[{"source_index":0,"quote":"The technology works by \"matching faces against known offenders\" as they enter a premises, through a cloud-based facial recognition system."},{"source_index":0,"quote":"Byron Long, 66, was told to leave a B&M store at Cardiff Bay Retail Park and accused of stealing £75 worth of goods on a previous visit - until a review of CCTV footage showed he had paid for his shopping and not stolen anything."},{"source_index":0,"quote":"Facewatch said it was a case of \"human error, not a failure of the technology\"."},{"source_index":0,"quote":"B&M has apologised to Mr Long and offered him a £25 voucher, which he has rejected, while the Big Brother Watch campaign group has made a formal complaint to the Information Commissioner's Office on his behalf."},{"source_index":0,"quote":"B&M confirmed that Mr Long's data has now been removed."},{"source_index":0,"quote":"Mr Long said his mental health issues worsened after the incident on 29 April and described B&M's apology as \"measly words without meaning\"."}]},"notes_on_gaps":"The sources do not state the year of the 29 April incident, so no occurrence date is recorded; the article's publication date is not stated in the body text. No date of disclosure is recorded. The sources do not state the detection method, the number of people affected beyond Mr Long, the monetary loss, or the records exposed. The source gives no autonomy level, trigger, or failure class: the system is facial recognition with human review, not an autonomous agent, so agent_involved is false and no failure class is set (judgement). Incident class operational_error and root cause oversight are my judgement from the statements of human error; Facewatch and B&M both attribute the error to humans, and the sources do not say which staff member or step failed. Severity moderate is a judgement from the test that data of others was touched with a bounded scope; the scope is one individual. Deployment context production is inferred from the statement that the system is used by retailers. Facewatch's claim that its system worked as it should is reported as the company's position, not verified. No remediation adds a control from the list, so none is recorded; the data deletion is reported but is not mapped to a listed control. Mr Long's CCTV was due to be deleted in three days, which was not stated as a fact about the retailer's policy beyond his account. [case created by the backfill: read by claude-haiku-5-5, backfill-2026-11-01.2, 2026-11-01; not yet reviewed] [2026-11-01: evidence level set: Preliminary (1 report: BBC · subject to change)]"},"context":{"industry":null,"org_size_band":null,"country":"GB","denominator_available":false,"denominator":null,"related_incident_ids":[],"systemic_exposure":null,"shared_model_id":null,"upstream_incident_id":null,"incident_evidence":null,"regulatory":null,"coverage":null},"narrative":{"steps":[{"step":"went_wrong","text":"A man was added to a facial recognition watchlist and falsely accused of shoplifting.","quote":"A man falsely accused of shoplifting after being added to a facial recognition watchlist has warned it \"could happen to anyone\".","source_index":0,"grade":"C"},{"step":"reached","text":"Byron Long was told to leave the B&M store and accused of stealing £75 of goods on a previous visit, until CCTV review showed he had paid.","quote":"Byron Long, 66, was told to leave a B&M store at Cardiff Bay Retail Park and accused of stealing £75 worth of goods on a previous visit - until a review of CCTV footage showed he had paid for his shopping and not stolen anything.","source_index":0,"grade":"C"},{"step":"done","text":"B&M apologised and offered a £25 voucher, which Mr Long rejected. Big Brother Watch complained to the ICO on his behalf.","quote":"B&M has apologised to Mr Long and offered him a £25 voucher, which he has rejected, while the Big Brother Watch campaign group has made a formal complaint to the Information Commissioner's Office on his behalf.","source_index":0,"grade":"C"}],"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.bbc.co.uk/news/articles/c3vn4p1lwqno"]},"analysis":{"sections":{"timeline":[{"text":"Mr Long was accused of stealing £75 of goods on a previous visit to the store.","quote":"Byron Long, 66, was told to leave a B&M store at Cardiff Bay Retail Park and accused of stealing £75 worth of goods on a previous visit - until a review of CCTV footage showed he had paid for his shopping and not stolen anything.","source_index":0,"when":null},{"text":"Incident at the B&M store at Cardiff Bay Retail Park, after which Mr Long was told to leave.","quote":"Mr Long said his mental health issues worsened after the incident on 29 April and described B&M's apology as \"measly words without meaning\".","source_index":0,"when":"29 April"},{"text":"After the retailer informed Facewatch, the individual's data was deleted.","quote":"Our system worked exactly as it should, and as soon as we were informed by the retailer, the individual's data was immediately deleted in line with our strict procedures.","source_index":0,"when":null},{"text":"B&M confirmed Mr Long's data had been removed.","quote":"B&M confirmed that Mr Long's data has now been removed.","source_index":0,"when":null},{"text":"Big Brother Watch made a formal complaint to the Information Commissioner's Office on Mr Long's behalf.","quote":"While the Big Brother Watch campaign group has made a formal complaint to the Information Commissioner's Office on his behalf.","source_index":0,"when":null}]},"model":"claude-haiku-5-5","prompt_version":"backfill-2026-11-01.2","extracted_at":"2026-11-01","source_urls":["https://www.bbc.co.uk/news/articles/c3vn4p1lwqno"]}}