Wegmans collects customers' biometric data

Wegmans is an American supermarket chain headquartered in Rochester, NY, with stores across the east coast. With over 110 locations and over 54,000 employees, they make $12.5 billion in annual sales.^[1]

In January 2026, several Wegmans stores in New York City (NYC) have implemented facial recognition systems. As of January 12, many of the implementation details of this data collection are unclear. Stores outside of NYC may have facial recognition systems that are undisclosed, and little information is known about how long biometric data is retained and how it is being secured.

In 2024, Wegmans began a 60-day facial recognition pilot program at a Brooklyn store, claiming to only store data on select employees who consented to this program. Customers were displeased, drawing parallels to Kroger's or Walmart's use of facial recognition, and how facial recognition interlinks with other practices like racial profiling and algorithmic pricing.^[2]

In January 2026, Wegmans stores in Manhattan and Brooklyn began displaying posters that disclosed the use of biometric data collection in their stores. The posters specify that the data collected may include faces, eye scans, and voiceprints. A disclaimer states that this biometric data will not be leased, traded, or otherwise profited from. But the collection of this biometric data is inherently troublesome, as once collected, there is no way to guarantee Wegmans upholds their policy, and even if they do, the data could be leaked by a rogue employee or released by hackers after a data breach.^[3] Jonathan Weissman, a cybersecurity professor at Rochester Institute of Technology, emphasizes that unlike credit card numbers or passwords, biometric data cannot be changed, making a biometric data breach especially harmful.^[4] He also notes that although biometric data is useful for authentication, it is not specific to one business or service; it can be used anywhere once captured.^[5] This immutable and widely applicable data is a lucrative target for hackers, making it a near-inevitability that it will be leaked at some point in the future if enough companies collect biometric data.

In a statement, Wegmans clarified that although most of their stores have cameras, only a select few stores conduct facial recognition. Additionally, despite the disclaimer that several types of biometrics may be captured, only facial recognition data is currently being collected, and data is only retained as long as necessary. However, the retention period cannot be publicly disclosed for security reasons. The full statement is reproduced below:^[4][6]

At Wegmans, the safety of our customers and employees is a top priority. Like many retailers, we use cameras to help identify individuals who pose a risk to our people, customers, or operation. In a small fraction of our stores that exhibit an elevated risk, we have deployed cameras equipped with facial recognition technology. In New York City, we comply with local requirements by posting the mandated signage to notify customers about the technology.

This technology is solely used for keeping our stores secure and safe. The system collects facial recognition data and only uses it to identify individuals who have been previously flagged for misconduct. We do not collect other biometric data such as retinal scans or voice prints. Images and video are retained only as long as necessary for security purposes and then disposed of. For security reasons, we do not disclose the exact retention period, but it aligns with industry standards.

Persons of interest are determined by our asset protection team based on incidents occurring on our property and on a case-by-case basis, by information from law enforcement for criminal or missing persons cases. We do not share facial recognition scan data with any third party.

We understand concerns about fairness and bias in facial recognition systems. We employ a multitude of training and safety measures to help keep people safe. Facial recognition technology serves as one investigative lead for us. We never base our decisions on a single lead alone.

Our goal is simple - to keep our stores safe and secure.

In a statement to Newsday, Wegmans stated that their facial recognition systems are present in "a handful of states."^[7]

Following the initial reporting, Monroe County Legislator Rachel Barnhart requested information on the scale of biometric data collection and the future use of this technology at Wegmans.^[8] One of her questions is if biometric surveillance is being conducted in any Wegmans stores outside of NYC, noting that NYC is one of the few jurisdictions that has a biometric data collection disclosure law.^[9] This implies that biometric data collection could be used unbeknownst to the public in other locales that do not have disclosure laws.

NYC Councilmember Shahana Hanif stated that "Biometric data should not be collected, stored, or sold by private actors—it poses a serious threat to our civil liberties," and is reintroducing a bill to ban the collection of biometric data.^[8]

On January 7, Connecticut state senators Bob Duff and James Maroney announced their intent to pass legislature in February to ban biometric data collection in stores. Currently, Connecticut is governed by its 2022 Data Privacy Act, which requires consent for collecting sensitive data, but carves out exceptions for preventing crime and fraud. Wegmans has not stated whether facial recognition is being used in its Norwalk store.^[10]