sec.27BOperation of facial recognition technology system— Act , s 235

### sec.27B Operation of facial recognition technology system— Act , s 235 Subject to this section, a licensee is authorised to operate a facial recognition technology system on the licensee’s licensed premises. A facial recognition technology system may be operated on a licensee’s licensed premises only if— the licensee— is treated as an organisation under the Privacy Act 1988 (Cwlth) ; and complies with that Act in relation to the protection of personal information held in the system; and the system— is used for identifying an excluded person to prevent the person from entering the licensed premises in contravention of a banning order for regulated premises or licensee ban; and includes a function that deletes any biometric information recorded by the system that does not identify an excluded person. A licensee who operates a facial recognition technology system under this section must display a sign complying with subsections (4) and (5) on the licensee’s licensed premises. Maximum penalty—20 penalty units. The sign must state that a facial recognition technology system is in operation on the licensee’s licensed premises. The sign must be displayed— in a conspicuous position at each entrance to the licensee’s licensed premises; and if an ID scanner is in use on the premises—in a conspicuous position and in close proximity to the ID scanner. If a licence for licensed premises ends under the Act , the licensee or person who was the licensee must not keep or disclose any personal information held by a facial recognition technology system operated on the premises. Maximum penalty—20 penalty units. A licensee who operates a facial recognition technology system under this section must ensure any personal information held by the system is not used— to promote the consumption of liquor; or in connection with a customer loyalty or reward program. Maximum penalty—20 penalty units. In this section— banning order , for regulated premises, see section 173EE of the Act . excluded person means a person who is the subject of a banning order for regulated premises or a licensee ban in force for the person. facial recognition technology system means a system that— enables the facial image of a person to be recognised, identified and recorded; and compares the facial image mentioned in paragraph (a) with biometric information held in the system about excluded persons. licensee ban see section 173EE of the Act . regulated premises see section 173EE of the Act . s 27B ins 2025 SL No. 162 s 5 (sec.27B-ssec.1) Subject to this section, a licensee is authorised to operate a facial recognition technology system on the licensee’s licensed premises. (sec.27B-ssec.2) A facial recognition technology system may be operated on a licensee’s licensed premises only if— the licensee— is treated as an organisation under the Privacy Act 1988 (Cwlth) ; and complies with that Act in relation to the protection of personal information held in the system; and the system— is used for identifying an excluded person to prevent the person from entering the licensed premises in contravention of a banning order for regulated premises or licensee ban; and includes a function that deletes any biometric information recorded by the system that does not identify an excluded person. (sec.27B-ssec.3) A licensee who operates a facial recognition technology system under this section must display a sign complying with subsections (4) and (5) on the licensee’s licensed premises. Maximum penalty—20 penalty units. (sec.27B-ssec.4) The sign must state that a facial recognition technology system is in operation on the licensee’s licensed premises. (sec.27B-ssec.5) The sign must be displayed— in a conspicuous position at each entrance to the licensee’s licensed premises; and if an ID scanner is in use on the premises—in a conspicuous position and in close proximity to the ID scanner. (sec.27B-ssec.6) If a licence for licensed premises ends under the Act , the licensee or person who was the licensee must not keep or disclose any personal information held by a facial recognition technology system operated on the premises. Maximum penalty—20 penalty units. (sec.27B-ssec.7) A licensee who operates a facial recognition technology system under this section must ensure any personal information held by the system is not used— to promote the consumption of liquor; or in connection with a customer loyalty or reward program. Maximum penalty—20 penalty units. (sec.27B-ssec.8) In this section— banning order , for regulated premises, see section 173EE of the Act . excluded person means a person who is the subject of a banning order for regulated premises or a licensee ban in force for the person. facial recognition technology system means a system that— enables the facial image of a person to be recognised, identified and recorded; and compares the facial image mentioned in paragraph (a) with biometric information held in the system about excluded persons. licensee ban see section 173EE of the Act . regulated premises see section 173EE of the Act . - (a) the licensee— (i) is treated as an organisation under the Privacy Act 1988 (Cwlth) ; and (ii) complies with that Act in relation to the protection of personal information held in the system; and - (i) is treated as an organisation under the Privacy Act 1988 (Cwlth) ; and - (ii) complies with that Act in relation to the protection of personal information held in the system; and - (b) the system— (i) is used for identifying an excluded person to prevent the person from entering the licensed premises in contravention of a banning order for regulated premises or licensee ban; and (ii) includes a function that deletes any biometric information recorded by the system that does not identify an excluded person. - (i) is used for identifying an excluded person to prevent the person from entering the licensed premises in contravention of a banning order for regulated premises or licensee ban; and - (ii) includes a function that deletes any biometric information recorded by the system that does not identify an excluded person. - (i) is treated as an organisation under the Privacy Act 1988 (Cwlth) ; and - (ii) complies with that Act in relation to the protection of personal information held in the system; and - (i) is used for identifying an excluded person to prevent the person from entering the licensed premises in contravention of a banning order for regulated premises or licensee ban; and - (ii) includes a function that deletes any biometric information recorded by the system that does not identify an excluded person. - (a) in a conspicuous position at each entrance to the licensee’s licensed premises; and - (b) if an ID scanner is in use on the premises—in a conspicuous position and in close proximity to the ID scanner. - (a) to promote the consumption of liquor; or - (b) in connection with a customer loyalty or reward program. - (a) enables the facial image of a person to be recognised, identified and recorded; and - (b) compares the facial image mentioned in paragraph (a) with biometric information held in the system about excluded persons.