Key Points

• Retail surveillance is moving from centralized video storage toward edge-based AI processing on cameras and local devices.
• Facial recognition, license plate reading, checkout monitoring, and other biometric tools are being deployed for theft prevention, access control, and customer analytics.
• State privacy rules diverge sharply on biometric notice, consent, retention, and whether security uses receive special treatment.
• Illinois remains the strictest recurring reference point, while Colorado, Texas, Washington, and other states add different rules for biometric and profiling uses.
• A parallel theme is privacy-by-design: minimum-data collection, encryption, retention controls, and incident planning for transcripts, images, and action logs.
• The business case for these systems is framed around shrink reduction, operational efficiency, and real-time alerts, but oversight and accountability concerns remain unresolved.
• Some material is descriptive or market-oriented, but the strongest signal is operational deployment plus compliance adaptation rather than abstract policy debate.