PrivacyHigh
McDonald's AI Drive-Thru Allegedly Collected Biometric Customer Data without Consent, Violating BIPA
- Occurred
- Oct 15, 2021
- Published
- Jun 2, 2021
- Source
- AI Incident Database
Summary
McDonald's use of chatbot in its AI drive-through in Chicago was alleged in a lawsuit to have collected and processed voice data without user consent to predict customer information, which violated Illinois Biometric Information Privacy Act (BIPA).
Developers
- McD Tech Labs
- Apprente
Deployers
- McDonald's
Harmed parties
- Shannon Carpenter
- McDonald's customers residing in Illinois
- McDonald's customers
- Privacy
- Biometric data subjects
Classification
Category confidence: 95%
Severity confidence: 90%
Rationale: Lawsuit alleges unauthorized biometric data collection violating BIPA, constituting a significant privacy violation.
Classifier: Qwen/Qwen3.5-35B-A3B-FP8