Cases › operational mistake › LR-2026-0381
Sainsbury's ejects innocent man after facial recognition mix-up
Preliminary Why: Publisher not yet named · subject to change
Status: no action reported
No source states: loss or records, developer and model, agent tool, could do, deployer, industry.
Severity minor: Test: minor (contained to one deployer and one store, routine cleanup). The sources state one shopper was affected, one in-store incident, and no data of others touched.
Sainsbury's uses a facial recognition system, supplied by Facewatch, in a trial across several London and other stores as part of a shoplifting crackdown. A shopper, Warren Rajah, was removed from the store after the system flagged him. The flag was for another shopper, and staff approached the wrong customer. Facewatch's data protection team checked and found he was not on its database and had not triggered any alerts. Sainsbury's apologised to Mr Rajah, saying the problem was not with the technology but with the wrong person being approached in store.
What happened
No source tells the story step by step yet.
What was done
No source states an action or fix.
Risks
Primary63 incidents
Rising: 5 vs 2.2 a week
Sorted by rule from the case's fields; not yet read from the sources.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
HarnessTool allow-list · Fail-closed defaults · Stop control
ApplicationHuman approval for high-impact actions · Change review and separation of duties · Least-privilege access for the agent · Production kept apart from test · Activity logs · Adversarial testing before deployment
Infrastructure / targetSimilar incidents
Evidence
No source states: a step-by-step account, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.
Show the full account: 1 items from the primary sources
What happened, in order
Not dated in the sources:
- Sainsbury's began trialing facial recognition in two stores, Sydenham and Bath Oldfield Park.
Show every field, with its source and grade
What happened
Impact
Notes on gaps
No remediation is reported by either party.
LR-2026-0381 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON