Biometric scanners at public venues used to be rare. They're now standard at many airports, common at major concert venues and stadiums, and — as of this month — running at Disneyland's park entrances.
Most of these systems offer an opt-out. Almost none of them make it easy to find.
Here's what to do.
Step 1: Check before you go
Search "[venue name] facial recognition" before your visit. Most large venues that use the technology have posted a policy page — look for it in their privacy policy or FAQ. You want to know:
Whether they use facial recognition (or biometrics of any kind)
Whether opt-out lanes exist
What happens to your image if you use the opt-out lane
At Disneyland, for example, Disney's own policy confirms that even guests who use the opt-out entrance may still have their image captured — just not processed biometrically. That's worth knowing in advance.
Step 2: Arrive with extra time
Opt-out lanes often require a staff member to manually validate your ticket. At a busy venue, that takes longer than automated entry. Budget an extra 10–15 minutes if you plan to opt out.
Step 3: Know the signage
At venues with opt-out options, the signage is usually at security screening areas — not at the ticket gate, not on your ticket, not in the app. It's easy to walk past.
At Disneyland: lanes at the main Esplanade entrances display "Entrance" overhead and use Cast Member validation instead of biometric scanning.
At airports: CBP facial recognition at US international departure gates is optional. Look for the "U.S. citizens may opt out" language and ask a CBP officer to scan your passport manually instead.
At stadiums and arenas: signage varies. If you don't see it, ask before you walk through the scanner.
Step 4: Know which states give you stronger rights
Illinois has the strongest biometric privacy law in the US — the Biometric Information Privacy Act (BIPA). If you're in Illinois, venues must:
Obtain your written consent before collecting biometric data
Tell you the specific purpose and how long the data will be kept
Never sell your biometric data
Texas and Washington have similar laws. If you live or visit there, you have statutory rights that go beyond what most venues disclose voluntarily.
California's laws are broader but less specific on biometrics — that's part of what the Disneyland lawsuit is testing.
Step 5: After the visit
If a venue collected your biometric data, you may have the right to request deletion. Check the venue's privacy policy for a "delete my data" or "data subject request" link. Most are buried in the footer — search the page for "delete" or "request."
Submit the request in writing and keep a copy.
The short version
Check the venue's policy first. Use the opt-out lane if one exists. Know your state's law. Request deletion afterward if you want the data gone.
Five steps. Most people never take one.
Up next · Monday
One story from the week in privacy news — what happened, why it matters, and what to do.