A private company can surely link its own cameras and data to create a private use database of undesirables. I’m certain that Walmart and friends do exactly this already. It’s the large scale version of the Polaroids behind the counter.
- The footage must be secured / only stored locally, and can only be used in legal proceedings or liability, and can be stored for maximum 1 (or a different number) year
- It cannot be sold or used to train AI or processed for marketing or other purposes without consent of all involved (in practice impossible).
- And no people cannot "agree" to things by just entering the premises or view
- It is illegal to make decisions based on illegally obtained (as per above) analytics, like refusing entry/membership/service, with a private right of action
Again, this is not discrimination if it’s done for specific individuals, even if it’s done using data collected in aggregate. Banning a protected group wouldn’t be illegal. But banning a specific person would not.
Whether it’s legal to sell that same data as a list of undesirables is the open untested question.