Without Enhanced Privacy Regulations, Australians Are Experimenting in a Dystopian AI Reality | Peter Lewis

Say cheese! The recent ruling from an administrative review tribunal permitting Bunnings to employ facial recognition technology for regular customer surveillance paints a troubling picture of Australia’s preparedness for the approaching AI revolution last week.

On the surface, this tribunal’s decision to overturn the privacy commissioner’s conclusion labeling Bunnings’ use of this invasive AI technology as unlawful appears to be merely a procedural matter. However, the implications are far-reaching and significant.

Prepare for a reality where retailers and businesses operating in public areas may begin to increase their efforts in collecting biometric data, often juxtaposing it with vast external databases that may not be accurate, to make instantaneous judgments about our access to what was once considered communal space.

Bunnings defends its actions as a response to rising in-store violence; however, this heavy-handed technological response strips away the human essence of both customers and employees in the name of safety.

The covert surveillance of customers has shifted the marketplace from a space of genuine human connection to one characterized by automated checkouts, watched shoppers, and employees compelled to wear body cameras to document the anticipated adverse reactions.

Australia’s privacy regulations, which have not seen substantial updates for four decades, are not bugs in this unfolding dystopia; they are integral to the overarching trajectory that big tech is steering us toward.

The need for significant privacy reform had been championed by former attorney general Mark Dreyfus, who succeeded in passing a minor set of changes focusing on children’s privacy before exiting the scene due to internal party dynamics following the 2025 election.

His envisioned second phase of amendments shouldn’t be controversial, as they include expanding the definition of “personal information” to encompass our digital traces, abolishing “tick a box” consent for data collection, and endowing individuals with rights to access and erase their digital footprints—all while ensuring heightened scrutiny for high-impact technologies like facial recognition.

Polling consistently shows that the public strongly favors these enhancements; however, the challenge lies in translating this support into effective action against powerful interests that continuously resist meaningful reform in this arena regular polling.

A lengthy list of those trying to sidestep the bill exists, including small businesses, media outlets, and political parties, each presenting their unique arguments. Additionally, a growing array of organizations that thrive on our data exploitation will advocate fiercely to safeguard their interests.

Certainly, the advancement—or stagnation—of these privacy reforms will serve as a preliminary gauge of the government’s broader strategy for AI, encapsulated in its relatively lenient National AI Plan. This plan prioritizes updating numerous existing laws over implementing targeted regulations designed to protect the public, all in the name of “enhancing productivity.”

While this approach may appear straightforward in theory, the fragmentation of laws across various departments carries the danger of each legislative battle pitting well-funded tech industries and vested interests against the resource-strapped sectors of civil society.

Looking towards the future, the groundwork for addressing the upcoming challenges posed by AI encompasses a multitude of areas, including copyright (as the tech sector makes fresh attempts to justify the appropriation of creative works), online safety (due to the proliferation of AI-based “nudify” applications and other inappropriate tools), consumer protection (particularly concerning automated sophisticated scams), workplace regulations (to ensure employees understand the mechanics behind the AI models that could displace them), and an online duty of care that mandates accountability for the impact of AI technologies.

Enumerating these challenges can be exhausting, yet the higher concern is that the National AI Plan lacks a planned, cohesive strategy to align these issues and establish universal principles to address them.

For any meaningful social contract with AI to materialize, a solid foundation of privacy principles is essential. These principles must dictate the parameters surrounding the collection and trade of personal information, whether it pertains to online activity, search patterns, or behaviors observed in the physical world.

If the anticipated AI upheaval reaches even a fraction of its predicted impact, the repercussions we encounter as workers, consumers, and citizens will be profound. Surely, it is not too much to expect our government to actively engage and give us a voice in these future developments.

Returning our focus to Bunnings, the normalization of such ongoing citizen surveillance is disconcerting.

We are often told that we must hasten our AI advancements to outpace the oppressive Chinese surveillance model, even while the same identification technologies are being utilized in the U.S. and by the Israeli military in Gaza.

It’s worth noting that privacy regulations stemmed from responses to the atrocities of the Holocaust, aimed at preventing the dangers associated with classifying and centralizing citizen information. Historical accounts reveal how organizations like IBM unintentionally advanced the Nazi regime.

The first consumer privacy laws emerged in 1960s West Germany, laying the groundwork for the GDPR framework in the European Union, which remains one of the most robust systems for data protection in the contemporary digital age.

Long before the rise of social media algorithms and AI frameworks built on the unauthorized harvesting of our creativity, society acknowledged the necessity for spaces free from surveillance where people can exist authentically.

Unfortunately, this sense of privacy has gradually eroded, and the pace is now quickening—from simply documenting identity to a pervasive digital footprint traded among corporations, culminating in a unique biometric profile that will increasingly dictate our actions.

Without robust privacy protections, we risk becoming subjects of a real-time experiment that fundamentally alters our once-private lives. If we are to establish boundaries, that urgency is now. Bunnings could at least provide the sausages.