If you’re one of the 8 million or so Australians who shop at Kmart every year, chances are you were being watched. Every shopper who entered had their face scanned and stored in a system designed to catch refund fraudsters. Kmart breached customers’ privacy by scanning their faces without consent, the privacy commissioner has found. Credit: BloombergOn Thursday, following a three-year investigation, Australia’s privacy commissioner ruled that the practice was in breach of the nation’s privacy laws, and thus illegal. It follows a similar finding against Bunnings – which has the same parent company, Wesfarmers – a decision under review by the Administrative Review Tribunal.