The Privacy Commissioner has found retail giant Bunnings breached privacy laws by using facial recognition technology on its customers. The regulator says Bunnings did not gain proper consent to use the technology. Kmart is also under investigation by the regulator for using facial recognition, but a finding is yet to be made.