Federal court bans Rite Aid from AI facial-recognition surveillance for five years after FTC alleges thousands of false-positive matches

The problem

Per the FTC’s announcement, “from 2012 to 2020, Rite Aid deployed artificial intelligence-based facial recognition technology in order to identify customers who may have been engaged in shoplifting or other problematic behavior” — in the FTC’s words, “in hundreds of stores” (FTC press release, 19 Dec 2023). Cameras matched shoppers against a watchlist database of “persons of interest”; the complaint alleges “Rite Aid enrolled at least tens of thousands of individuals in its database,” many from low-quality CCTV stills and employee phone photos (FTC v. Rite Aid, complaint and case documents). When the system flagged a match, employees received alerts instructing them to act.

What the regulator alleged

The FTC’s federal-court complaint (filed 19 December 2023, E.D. Pa.) alleges the system was never validated: “Rite Aid failed to test or assess the technology’s accuracy before deploying facial recognition technology from its two vendors” (FTC case file). The result, per the complaint: the technology “generated thousands of false-positive matches,” and employees “recorded thousands of false positive match alerts between December 2019 and July 2020” alone. In that same window the system “generated over 5,000 match alerts in stores that were more than 100 miles from the store that created the relevant enrollment.” Acting on false alerts, the complaint says, employees followed, searched, and expelled customers and called the police on them; in one alleged incident, “Rite Aid employees stopped and searched an 11-year-old girl” on a false match — “The girl’s mother told Rite Aid that she had missed work because her daughter was so distraught by the incident” (CNN Business, 20 Dec 2023).

The FTC also alleged the deployment itself skewed by race: “although approximately 80 percent of Rite Aid stores are located in plurality-White … areas, about 60 percent of Rite Aid stores that used facial recognition technology were located in plurality non-White areas,” and the technology “was more likely to generate false positives in stores located in plurality-Black and Asian communities than in plurality-White communities” (FTC press release).

These are allegations, not adjudicated findings: Rite Aid settled by stipulated order without admission, and told press it was “pleased to reach an agreement” but “we fundamentally disagree with the facial recognition allegations in the agency’s complaint,” describing “a facial recognition technology pilot program the Company deployed in a limited number of stores” that it says it stopped “more than three years ago, before the FTC’s investigation regarding the Company’s use of the technology began” (Forbes, 19 Dec 2023).

What the court ordered

The Commission voted 3-0 to file the complaint and proposed stipulated order (announced 19 December 2023). Because Rite Aid was in Chapter 11, the order needed bankruptcy-court approval (entered 23 January 2024, Bankr. D.N.J.) before the U.S. District Court for the Eastern District of Pennsylvania entered it — “SO ORDERED this 23rd day of February, 2024. /s/ Hon. Kelley B. Hodge” (FTC case file, entered order).

The entered order’s first provision is the ban: Rite Aid is “prohibited for five (5) years from the effective date of this Order from deploying or using, or assisting in the deployment or use of, any Facial Recognition or Analysis System, whether directly or through an intermediary, in any retail store or retail pharmacy or on any online retail platform.” Within 45 days it must “delete or destroy all photos and videos of consumers used or collected in connection with the operation of a Facial Recognition or Analysis System … and any data, models, or algorithms derived in whole or in part therefrom” — algorithmic disgorgement — with sworn confirmation to the Commission, and it must instruct third parties to delete the same (FTC press release).

There is no fine or monetary payment in this order — the remedy is the ban, the deletions, mandated safeguards for any future automated biometric systems, and a new information-security program (the latter settling separate charges that Rite Aid violated a 2010 FTC data-security order — a distinct matter this story does not conflate with the facial-recognition counts).

Why this matters for AI operations

This is the verified-negative that anchors TIN’s thesis from the enforcement side: an AI system deployed at scale — per the regulator, over eight years and hundreds of stores — with no accuracy testing at all, ending in a court-entered five-year ban and destruction of the models built on the data. The attribution limit is stated plainly: the “AI” framing is the FTC’s own (release and headline); the operative order text bans “Facial Recognition or Analysis Systems,” and the text extractions of the complaint and order do not use the phrase “artificial intelligence” (with the complaint’s scanned first page flagged as a verification gap, not silently assumed). Every critical figure above originates with the independent regulator and the signing court, not with the company.

How this was verified

Method: the court-entered stipulated order and the filed complaint were fetched live from ftc.gov and checked byte-for-byte against Wayback captures, with every quoted line confirmed against the primary documents; the FTC press release and case page were captured at CDX-confirmed Wayback timestamps; and two bylined relays (CNN Business, Forbes) were used only to carry Rite Aid’s right of reply, not to source the figures. No figure on this page originates with Rite Aid. Independently verified against the public record on 2026-08-03.

Related case files

• FTC v. Evolv — AI weapons-detection, court-stipulated injunction with K-12 cancellation right
• FTC v. IntelliVision — facial-recognition “zero bias” claims, 20-year consent order

Sources

1. [Tier 1 — Primary / Regulator] Federal Trade Commission, “Rite Aid Banned from Using AI Facial Recognition After FTC Says Retailer Deployed Technology without Reasonable Safeguards” (press release), 19 December 2023. https://www.ftc.gov/news-events/news/press-releases/2023/12/rite-aid-banned-using-ai-facial-recognition-after-ftc-says-retailer-deployed-technology-without
2. [Tier 1 — Primary / Court documents] Federal Trade Commission, “Rite Aid Corporation, FTC v.” case page (complaint filed 19 Dec 2023; stipulated order SO ORDERED 23 Feb 2024, E.D. Pa., No. 2:23-cv-5023). https://www.ftc.gov/legal-library/browse/cases-proceedings/2023190-rite-aid-corporation-ftc-v
3. [Tier 2 — Independent relay] CNN Business, “Rite Aid’s ‘reckless’ use of facial recognition got it banned from using the technology in stores for five years,” 20 December 2023. https://www.cnn.com/2023/12/20/tech/rite-aid-ai-ftc-settlement
4. [Tier 2 — Independent relay] Forbes (Bruce Japsen), “FTC Bans Rite Aid From Using AI Facial Recognition Technology In Settlement,” 19 December 2023. https://www.forbes.com/sites/brucejapsen/2023/12/19/ftc-bans-rite-aid-from-using-ai-facial-recognition-technology-in-settlement/