Cases › operational mistake › LR-2026-0560
Shoppers falsely identified by Facewatch facial recognition in UK stores
Preliminary Why: 1 report: The Guardian · subject to change · 1 independent report
Developing: a major or severe case captured in the last 72 hours. Later changes are logged on the corrections page.
Status: no action reported
No source states: loss or records, agent tool, could do, deployer.
Severity major: test: a stated count of two or more affected parties (three errors, per Facewatch), and the ICO, a regulator, was involved after a complaint.
Facewatch, a live facial recognition system used by UK shops including B&M, Home Bargains, Sports Direct, Farm Foods and Spar, sends alerts about people it associates with known offenders so that staff can act in store. Several shoppers were wrongly identified and asked to leave or escorted out, including Ian Clayton at Home Bargains, Warren Rajah at Sainsbury’s and Jennie Sanders at B&M. Facewatch and Sainsbury’s attributed the errors to human error in store processes rather than the technology. Affected people said they received no support, could not easily complain, and had to submit subject access requests or passports to learn why they were flagged. Some received apologies or vouchers, and Sanders said the ICO had not responded after seven months. The ICO said it would publish further retail guidance.
What happened
What was done
No source states an action or fix.
Risks
Primary63 incidents
Rising: 5 vs 2.2 a week
Sorted by rule from the case's fields; not yet read from the sources.
Controls
Not yet read for controls. Controls that mitigate the primary risk:
HarnessTool allow-list · Fail-closed defaults · Stop control
ApplicationHuman approval for high-impact actions · Change review and separation of duties · Least-privilege access for the agent · Production kept apart from test · Activity logs · Adversarial testing before deployment
Infrastructure / targetSimilar incidents
Evidence
No source states: what the AI was doing, what went wrong, what it reached or did, when it happened, when it was found, how many records were exposed, the direct loss, a count of the other parties affected, any court case, the cause, what set it off, what was done.
Show the full account: 3 items from the primary sources
What happened, in order
Not dated in the sources:
- Staff told Clayton he had come up on the Facewatch system as a shoplifter.
- Clayton's subject access request revealed he had been wrongly associated with a shoplifting incident on a previous visit.
- Sainsbury’s said it provided additional training after the incident.
Show every field, with its source and grade
The AI system
What happened
Impact
Context
Notes on gaps
The sources do not give the year of the Clayton or Rajah visits (only February), the exact date of the Sanders incident (only last year), or the date the incident occurred. The disclosed date is taken from the article date in the source header, and the sentence quoted for it is the article's opening sentence. Facewatch's and Sainsbury's accounts that the errors were human error are their claims and were not independently verified. Home Bargains and B&M declined to comment. Sainsbury’s and Facewatch both say accuracy is 99.98%, which is a company claim, not a verified figure.
LR-2026-0560 · version 1 · published 2026-11-01 after automatic checks; not yet checked field by field by a person · JSON