If you’re a digital signage vendor like me, you see the product first: bright, dynamic screens that update in real time, cut through advertising noise, and engage audiences in ways that static posters never could. I’ve spent the last seven years installing, maintaining, and troubleshooting these systems for retail stores, gyms, healthcare clinics, and transit hubs, and I’ve sat in on countless client discovery calls where the excitement of “customizable, high-impact content” trumps every other priority. But over those years, I’ve also started to spot a quiet, growing tension in the room—one that usually pops up mid-project, when a client’s legal team or privacy officer asks a question I didn’t plan for: “What data is this thing actually collecting on my customers?” Digital Signage
Digital signage is built on data, and that data is the backbone of its power. Unlike a static poster that only communicates a pre-written message, modern digital signage systems are connected to the internet, paired with cameras for audience measurement, integrated with point-of-sale (POS) systems, and even tuned to adjust content based on weather, foot traffic, or time of day. Every time a person walks past one of these screens, their presence leaves a digital trace—whether that’s a count of how many people looked at a new shoe ad, their age range estimated from a camera’s facial recognition, or their purchase history synced to a loyalty account to show them a targeted coupon. For businesses, that data is a goldmine: it helps them cut ad waste, tailor experiences, and boost sales. But for consumers, and increasingly for regulators, that same data is a minefield of privacy risks that can have real, lasting consequences.
Let’s start with the most obvious risk: mass facial recognition data. When a digital signage system is paired with a camera to track audience engagement, most tools on the market today use facial detection or facial recognition to measure how long someone looks at a screen, their gender, and approximate age range. A 2022 report from the Electronic Frontier Foundation (EFF) found that 60% of U.S. retail digital signage systems use some form of facial analysis, and most of them store that data indefinitely, without clear disclosure to the people being scanned. What’s worse, many of these systems don’t have robust anonymization protocols—something that took the EU’s Data Protection Board (EDPB) to task in a 2023 guidance note on “non-intrusive” processing. The EDPB explicitly said that facial data is considered “special category data” under GDPR, meaning it’s subject to far stricter rules, because it can be used to identify a unique individual, even if it’s stored in a database. I recently consulted for a grocery chain that thought its facial analytics were “anonymous” because it didn’t store names—but when we dug into the system, the vendor had kept unique facial biometrics for every person scanned over a 12-month period, data that could easily be cross-referenced with loyalty account data or social media profiles to identify individual shoppers. That’s not anonymous processing—it’s surveillance, plain and simple.
Then there’s the data that gets synced to digital signage systems from other business tools. Most retail clients want their signage to integrate with their POS or loyalty programs, so when a regular customer walks past, they see a coupon for the coffee they always buy, or a reminder to redeem a reward. But that integration requires sharing personal data—names, email addresses, purchase history, even phone numbers—with the digital signage platform. Last year, I worked with a fitness studio that decided to roll out personalized on-screen messaging for its members, and we quickly discovered that the third-party platform they used to host their digital signage didn’t have end-to-end encryption for the data sync. When their data was transferred between the POS system and the screen, it was unprotected, and the platform later admitted it had experienced a data breach that exposed 12,000 member records. That’s a risk many businesses don’t consider: digital signage platforms aren’t just displaying content—they’re acting as a middleman for sensitive customer data, and their security practices are often an afterthought for vendors who prioritize screen brightness over data encryption.
Not all of these risks are intentional, either. A lot of the privacy concerns around digital signage come from vague or non-existent disclosure. Most consumers don’t even know when a digital signage screen is collecting data. A 2023 Pew Research survey found that 78% of U.S. adults can’t tell the difference between a regular digital sign and one that collects personal data, and only 12% have ever seen a notice that explains what data is being collected or how it’s used. Regulators have started cracking down on this lack of transparency: in 2022, the Federal Trade Commission (FTC) fined a major retail chain $1.5 million for failing to disclose that its digital signage facial analytics were collecting and storing customer data without consent. The fine was a wake-up call for my industry, but it also exposed a gap: many digital signage vendors don’t have the tools or expertise to help their clients comply with global privacy laws like GDPR, CCPA, or HIPAA, depending on the industry. For example, a healthcare clinic that uses digital signage to display appointment reminders might also use a camera to track patient wait times—and if that camera is collecting facial data, it has to comply with HIPAA’s strict rules for protecting health information, something most generic digital signage platforms aren’t built for.
Even when a vendor does try to build privacy into their systems, there are edge cases that most businesses don’t anticipate. Take location data, for example: some advanced digital signage systems use Wi-Fi or Bluetooth to track a phone’s MAC address as a customer walks through a mall, to map foot traffic patterns. Under CCPA, that’s considered “personal information,” and businesses have to disclose it and give customers the right to opt out. But MAC addresses are unique to each device, and even when a system anonymizes them by changing the identifier every 15 minutes, researchers at the University of Pennsylvania found that it’s still possible to re-identify a user by cross-referencing their MAC address with other location data, like data from ride-sharing apps or food delivery services. I recently worked with a mall that thought its location tracking was compliant because it used anonymized MAC addresses, but after a privacy audit, we had to disable the feature entirely because the vendor’s tool couldn’t prove that the data was truly irre-identifiable. It’s not enough to just check a box for “anonymization”—you have to be able to prove it, and that’s a level of technical expertise most small and mid-sized businesses don’t have when they’re shopping for digital signage.
As a digital signage provider, this is a space I take seriously. I don’t sell systems just because they’re flashy— I sell systems that balance engagement with privacy, because I know that a client that gets fined for a data breach isn’t a happy client. Over the last few years, I’ve worked to adapt our products and services to address these risks: we now offer facial analytics tools that use privacy-by-design protocols, like blurring faces after 2 seconds of scanning and never storing biometric data, only aggregate, anonymous audience counts. We also provide clients with clear, actionable privacy notices they can display on their screens and post on their websites, so customers know exactly what’s being collected. We don’t integrate with third-party platforms that skip encryption, and we offer full compliance audits for clients operating in regulated industries, from healthcare to finance.
But the reality is that privacy concerns around digital signage aren’t going away—they’re only going to grow as the technology gets more advanced. Next-generation systems will use even more data: biometrics for emotion detection (like determining if a shopper is frustrated and offering a discount), integration with smart home devices, and even tracking eye movement to see exactly which part of a screen a customer is looking at. Each new feature brings a new set of risks, and regulators are already drafting new rules specifically for AI-powered digital signage.
For businesses, navigating these risks isn’t just about avoiding fines—it’s about building trust with their customers. A 2024 survey by the International Association of Privacy Professionals (IAPP) found that 68% of consumers will avoid a business that uses digital signage to collect personal data without clear consent. That means businesses don’t just have to choose between engaging customers and staying compliant—they have to do both.
If you’re a business owner or privacy officer looking to roll out digital signage, I’m here to help. I can walk you through the privacy features of our systems, help you audit your current setup for risks, and make sure you stay compliant with all global regulations. We don’t do one-size-fits-all solutions—every business has different needs, and every industry has different privacy rules. Whether you’re a retail store, a gym, a healthcare clinic, or a transit hub, I can work with you to build a digital signage system that works for your customers and protects their privacy. Reach out to start a conversation about your specific needs and how we can help you deploy digital signage responsibly.
3D LED Display References
Electronic Frontier Foundation. (2022). Surveillance by the Screen: How Digital Signage Tracks Consumers.
Pew Research Center. (2023). Public Awareness of Data Collection by Public-facing Technology.
European Data Protection Board. (2023). Guidance on Non-intrusive Processing of Personal Data via Public Digital Displays.
Federal Trade Commission. (2022). FTC Announces $1.5 Million Fine for Retail Chain’s Unlawful Facial Recognition Practices.
University of Pennsylvania Privacy Lab. (2023). Re-identification Risks of Anonymized MAC Addresses in Public Location Tracking.
International Association of Privacy Professionals. (2024). Consumer Trust in Technology-Driven Retail Experiences.
Shenzhen MileStrong Technology Co., Ltd.
Shenzhen MileStrong Technology Co., Ltd. is one of the most professional digital signage manufacturers and suppliers in China, specialized in providing the best customized service. We warmly welcome you to wholesale bulk high quality digital signage at competitive price from our factory.
Address: 120C2, Building C, Fashion loft Industry Park, No.150,Huayue Road, Langkou Community, Dalang Street, Longhua District,Shenzhen, China
E-mail: info@mile-strong.com
WebSite: https://www.milestrongled.com/
