Lawsuits claim delivery robots recorded biometric data without permission

Two new Chicago lawsuits claim unauthorized biometric data collections In these cases, the biometrics are face and body scans Coco Robotics and Serve Robotics have denied the allegations The backlash to what's perceived as surveillance technology continues, with two Chicago residents taking robot de

<![CDATA[ <article> <ul><li><strong>Two new Chicago lawsuits claim unauthorized biometric data collections</strong></li><li><strong>In these cases, the biometrics are face and body scans</strong></li><li><strong>Coco Robotics and Serve Robotics have denied the allegations</strong></li></ul><p>The backlash to what's perceived <a href="https://www.techradar.com/phones/this-is-how-you-win-back-users-after-a-surge-in-popularity-mapquest-will-now-show-you-where-flock-cameras-are-on-the-map">as surveillance technology</a> continues, with two Chicago residents taking robot delivery companies to court over the alleged collection of biometric data while dropping off food and groceries.</p><p>As the <a href="https://apnews.com/article/chicago-food-delivery-robots-biometric-data-lawsuits-16ead54eb7dc7c6eacbf011c53b9b20d" target="_blank">Associated Press</a> reports, the two men bringing the cases claim that robots from Coco Robotics and Serve Robotics turned up — via DoorDash and Uber Eats respectively — even though robot delivery hadn't been requested in the app. </p><p>The key allegation is that when these individuals were unlocking the robot cargo bay to get their orders, their hands and faces were scanned via camera and LiDAR technology, without explicit prior permission. If true, that would put Coco and Serve in breach of the Illinois Biometric Information Privacy Act (BIPA) of 2008.</p><p>Both class-action lawsuits claim that video and sensor data is being retained by these bots in violation of privacy law, and shared with AI companies for training purposes. Statutory damages of $1,000 per negligent violation or $5,000 per intentional or reckless violation are being claimed through the courts.</p><p>Both Coco Robotics and Serve Robotics have denied the allegations. We've reached out to both companies and will update this story if we hear back, but the AP reports Coco as saying the legal action is "frivolous", while Serve says it "does not use data to identify individuals or create biometric profiles".</p><h2 id="39-fundamentally-misunderstands-our-technology-39">'Fundamentally misunderstands our technology'</h2><figure class="van-image-figure inline-layout" data-bordeaux-image-check ><div class='image-full-width-wrapper'><div class='image-widthsetter' style="max-width:2000px;"><p class="vanilla-image-block" style="padding-top:56.25%;"><img id="6Fs56qMV5g7zfDH9NSswaD" name="serve-robotics" alt="A Serve Robotics robot" src="https://cdn.mos.cms.futurecdn.net/6Fs56qMV5g7zfDH9NSswaD-1920-80.jpg" mos="" align="middle" fullscreen="" width="2000" height="1125" attribution="" endorsement="" class="inline"></p></div></div><figcaption itemprop="caption description" class=" inline-layout"><span class="caption-text">A Serve delivery robot </span><span class="credit" itemprop="copyrightHolder">(Image credit: Serve Robotics)</span></figcaption></figure><p>The <a href="https://www.cocodelivery.com/privacy" target="_blank">Coco Robotics privacy policy</a> — last updated in 2022, before it started operating in Chicago — is a little light on data retention policies, but does mention sharing data with third parties and affiliates, though most of this seems to be aggregated and anonymized before it's used.</p><p>As for the <a href="https://www.serverobotics.com/privacy-policy/" target="_blank">Serve Robotics privacy policy</a>, it's been updated much more recently. It says data retention periods are determined by "contractual obligations with our delivery partners", and there's the standard vagueness about sharing information with unnamed "service providers and vendors" on occasion. There's also an explicit mention of sharing data "to train AI agents and models".</p><p>It's obviously impossible for a delivery robot to work without scanning its environment and navigating around sidewalks and pedestrians, and that's the defense being put forward here. The crux of the case will be whether the data collection involved was done without permission, and contravenes the Illinois privacy act.</p><p>"This lawsuit fundamentally misunderstands our technology, we have not collected biometric data in Chicago," a Coco spokesperson told the AP. "The data we share is navigational data used to make sidewalks safer for all users."</p><p>With complaints around Flock cameras, <a href="https://www.techradar.com/cameras/drones/doordash-says-its-new-drone-can-get-food-to-you-in-under-five-minutes-but-texas-residents-are-already-calling-amazon-drone-noise-a-big-problem">delivery drones</a>, 'spy' glasses, and other tech on the rise, it does feel there's more privacy scrutiny than ever before — with <a href="https://www.reddit.com/r/technology/comments/1xba01z/delivery_robots_accused_of_scanning_customers/" target="_blank">Redditors describing</a> these bots as "mobile data thieves" and "sidewalk surveillance".</p> </article> ]]>