The standards state that companies should
- disclose in privacy policies the data collected by digital signs and the purpose of the data;
- obtain affirmative consent before using facial recognition to identify an individual;
- notify consumers at the physical location of the sign when using facial recognition (or other means) to collect other information about an individual, such as age range or gender;
- allow consumers to submit complaints and request to access their data.