The Transformation of “Face Scanning”: Personal Information Protection Behind the Self-Service Machines in Shanghai Subway, Campus Stores, and Supermarkets
Editor’s Note: In response to the强制and abuse of facial recognition technology in some public places, Shanghai is deeply promoting the “Sword of Justice in Pujiang • 2024” special law enforcement action in 2024. Commissioned by the Shanghai Municipal Party Committee’s Internet Information Office, the Intelligent Law School of East China University of Politics and Law has established an evaluation team to conduct an assessment and investigation of the special law enforcement action as a third party. The evaluation team will release an evaluation report in early December.
At the end of October 2024, The Paper conducted field visits to 10 subway stations, 4 university campuses, some supermarkets, and parks and green spaces in different areas and on different lines in Shanghai to explore the real situation of the application of facial recognition technology in public places. Before the release of the evaluation report, this visit experience is once again published to let consumers tangibly feel the changes brought by the special rectification efforts of the Shanghai Municipal Party Committee’s Internet Information Office, Market Supervision and Administration Bureau, and other departments.
Facial recognition, as a new information technology, is being widely used in Shanghai in a well-regulated manner, especially in subway stations, campuses, supermarkets, and other consumption scenarios, where the issue of “face scanning” at vending machines has been significantly improved.
In August of this year, the Shanghai Municipal Internet Information Office launched the “Sword of Justice in Pujiang • 2024” special facial recognition rectification action, focusing on the issue of “face scanning” in multiple important locations. What is the current situation in various parts of Shanghai? At the end of October, reporters from The Paper conducted field visits to 10 subway stations, 4 university campuses, some supermarkets, and parks and green spaces in different areas and on different lines to find out.
Meanwhile, Liu Jie (a pseudonym), a university teacher who previously led a student team to investigate vending machines in multiple universities in Shanghai, also told The Paper that Shanghai promptly identified the issue of vending machines excessively requesting personal information and rapidly promoted rectification, which is a necessary step in promoting personal information protection. However, all sectors of society still need to strengthen collaboration to enhance citizens’ awareness of personal information protection.
First-hand Observations at Ten Subway Stations on Different Lines: Significant Improvement in “Face Scanning” Payments
“You have to ‘scan your face’ to buy a bottle of water from a vending machine.” In July of this year, multiple media outlets in Shanghai reported that vending machines in public places such as subways, campuses, and parks were excessively collecting personal information and inducing the use of “face scanning” payments, which could lead to the leakage of citizens’ personal information.
In the early stages, in response to public reports of illegal “face scanning” by vending machines in some subway stations, the Shanghai Municipal Internet Information Office, together with the Shanghai Municipal Market Supervision and Administration Bureau and the Shanghai Municipal State-owned Assets Supervision and Administration Commission, jointly summoned three vending machine operating companies in accordance with the law and guided Shentong Metro to conduct a comprehensive investigation and rectification of the abuse of facial recognition technology in vending machines within subway stations across the city.
Regarding the issue of “face scanning” at vending machines, reporters from The Paper visited multiple subway stations in Shanghai.
“After Shentong Metro conducted an investigation of the vending machines leased and operated within subway stations across the city, it was found that 14 companies were operating 1,462 vending machines in subway stations. The face payment function has been suspended for 829 of them with issues, and they will be relaunched after rectification is completed.” In the message released by the Shanghai Municipal Internet Information Office on October 14, the office also disclosed specific data and rectification measures from Shentong Metro’s investigation.
From October 24 to 28, after visiting 10 subway stations in different areas and on different lines in Shanghai, The Paper found that the situation of inducing the use of face scanning for payment had been significantly improved.
In front of a vending machine at Xizang Nanlu Station on Metro Line 8, The Paper found that the payment methods displayed on the vending machine were face scanning or QR code scanning. The “Heishi” smart cabinet at the same station also supports payment methods such as WeChat, Alipay, and digital RMB, so consumers do not need to worry about their personal information being excessively collected.
A vending machine at Yishan Road Station on Metro Line 9 no longer has the face scanning payment function. The Paper randomly selected a product, and the page displayed support for QR code scanning, cash, and card payments. The reporter quickly retrieved the product from below the vending machine after completing the payment.
In front of a vending machine named “Heishi” at Qufu Road Station on Metro Line 12, The Paper noted that clear operational instructions were given below the vending machine: Click on the product – Select payment method – Payment completed and product dispensed – Retrieve product from the retrieval port. The reporter randomly selected a product, and the page displayed three payment methods: WeChat, Alipay, and digital RMB.
In front of a vending machine at Tangqiao Station on Metro Line 4, after The Paper randomly selected a product, the vending machine displayed support for mobile payment client QR code scanning and cash payments. Next to a vending machine named “Youbao” on the platform, staff were organizing the products inside the cabinet. The reporter noted that the device’s cabinet displayed “Scan face/QR code to open, open to settle.” The staff explained that this was a new machine and “according to recent notices, the face scanning function needs to be disabled.”
Vending machines at multiple subway stations, including Longyao Road Station on Metro Line 11, Tilanqiao Station on Metro Line 12, Lujiabang Road Station on Metro Line 9, and Oriental Sports Center Station on Metro Line 6, all displayed WeChat and Alipay QR codes for consumers to scan and pay. These vending machines have a simple appearance and easy payment operations, eliminating the need for complex steps such as binding. A Nongfu Spring vending machine at Longyao Road Station even thoughtfully displayed “We recommend purchasing with WeChat or Alipay,” providing clearer payment instructions for consumers.
In addition, vending machines at Yishan Road Station on Metro Line 3 and Jiashan Road Station on Metro Line 9 support not only Alipay and WeChat payments but also UnionPay and digital RMB payments.
Wu Fenghu, a lawyer at Jingshi (Shanghai) Law Firm in Beijing, stated that face scanning payment, as an emerging payment method, while convenient, also increases the risk of exposure of sensitive personal information. For example, face scanning payment requires the collection and storage of users’ facial features, and these personal information data may be illegally obtained by others, leading to the risk of facial information leakage. Criminals may even use these leaked or illegally obtained facial information for replication or forgery, adopting identity theft to commit crimes, thereby causing significant harm to users’ personal dignity and even personal and property security.
“The rectification measures taken by Shanghai Metro for face scanning payments are undoubtedly a strong response to the protection of consumers’ personal information,” said Wu Fenghu.
Actual Measurements on Four University Campuses: Most Support QR Code Payments
In August of this year, under the title “40 out of 45 Vending Machines in Universities Request Personal Information, Teacher Calls for Improved Legislation,” The Paper reported on the issue of personal information protection in unmanned consumption scenarios, which was investigated by Liu Jie (a pseudonym), a university teacher who guided seven law students.
Liu Jie stated that through field testing of 45 vending machines in 28 universities in Shanghai, it was found that only 5 did not collect consumers’ personal information. Most of the remaining 40 required the binding of mobile phone numbers, and some even induced the use of WeChat or Alipay face scanning payments.
From October 24 to 28, The Paper visited four university campuses in Shanghai.
At Shanghai Jiao Tong University School of Medicine, The Paper found that most of the vending machines on campus use WeChat or Alipay QR code scanning for payment, and some vending machines guide consumers to use WeChat Pay Score to activate “pay after enjoyment” functionality. The reporter randomly selected a product, and the machine prompted the use of WeChat Pay Score to activate the “small amount password-free payment” function. After verifying the payment password to confirm the operation, the small amount password-free payment can be activated.
Some vending machines at Shanghai Jiao Tong University School of Medicine guide consumers to use WeChat Pay Score to activate the “password-free payment” function.
Students at the Minhang Campus of East China Normal University reported that the vending machines on campus previously supported both QR code scanning and face scanning payments, but now only support QR code scanning without requiring mandatory binding.
The vending machines at Shanghai University’s Baoshan Campus can be roughly divided into two types, with most supporting QR code scanning payments and only a few supporting both face scanning and QR code scanning payments. The reporter noted that for vending machines supporting QR code scanning payments, consumers are prompted to use WeChat Pay Score to activate small amount password-free payments during their first use. Some vending machines that previously only supported QR code scanning payments have newly added face scanning payment functionality.
The Paper noted that machines supporting face scanning payments are generally linked to consumers’ Alipay accounts. After clicking on face scanning payment, the machine’s camera automatically activates to recognize the face.
The vending machines at the Songjiang Campus of East China University
