Incident 360: McDonald's AI Drive-Thru Allegedly Collected Biometric Customer Data without Consent, Violating BIPA

Description: McDonald's use of chatbot in its AI drive-through in Chicago was alleged in a lawsuit to have collected and processed voice data without user consent to predict customer information, which violated Illinois Biometric Information Privacy Act (BIPA).

Tools

New ReportNew ReportNew ResponseNew ResponseDiscoverDiscoverView HistoryView History

Incident Stats

Incident ID
360
Report Count
3
Incident Date
2021-10-15
Editors
Khoa Lam
Applied Taxonomies
CSETv1, MIT

CSETv1 Taxonomy Classifications

Taxonomy Details

Incident Number

360

MIT Taxonomy Classifications

Machine-Classified
Taxonomy Details

Risk Subdomain

2.1. Compromise of privacy by obtaining, leaking or correctly inferring sensitive information

Risk Domain

  1. Privacy & Security

Entity

Human

Timing

Post-deployment

Intent

Intentional

McDonald's is testing automated drive-thru ordering at 10 Chicago restaurants
cnbc.com · 2021

Vehicles sit in drive-thru lanes at a McDonald's Corp. restaurant in Princeton, Illinois.

At 10 McDonald's locations in Chicago, workers aren't taking down customers' drive-thru orders for McNuggets and french fries — a computer is, CEO Chr…

McDonald’s faces lawsuit over its voice recognition technology
restaurantbusinessonline.com · 2021

A customer at an Illinois McDonald’s has filed a lawsuit against the chain, saying that the company violated state law by not getting prior approval before using voice recognition technology to take his order.

Shannon Carpenter is seeking c…

McDonald's AI drive-thru bot accused of breaking biometrics privacy law
theregister.com · 2021

McDonald’s has been accused of illegally collecting and processing customers' voice recordings without their consent in the US state of Illinois.

Like so many giant corporations, McDonald’s has turned to AI technology to use computers in pl…

Variants

A "variant" is an incident that shares the same causative factors, produces similar harms, and involves the same intelligent systems as a known AI incident. Rather than index variants as entirely separate incidents, we list variations of incidents under the first similar incident submitted to the database. Unlike other submission types to the incident database, variants are not required to have reporting in evidence external to the Incident Database. Learn more from the research paper.

Similar Incidents

By textual similarity

Did our AI mess up? Flag the unrelated incidents

Security Robot Drowns Itself in a Fountain

Security Robot Drowns Itself in a Fountain

· 30 reports

Defamation via AutoComplete

· 28 reports
Amazon Alexa Responding to Environmental Inputs

Amazon Alexa Responding to Environmental Inputs

· 35 reports
Previous IncidentNext Incident