In r/privacy, people argue some businesses over-collect identity data by scanning driver licenses while claiming it is required for age checks, raising concerns about downstream retention and reuse of that data.
I had this issue with cannabis dispensaries in California.
It seems like all of them in my area scan the back of the DL, claiming it's state law.
In fact, the only requirement in state law is to verify 18+ age.
The companies providing this technology are allowing easy verification for the businesses, but keeping the data for themselves.
This finding is one of many signals tracked across Cyber Security. The live feed updates every few hours with new authority voices, debates, and emerging ideas.
← Back to Cyber Security