OOF-AII-443692
McDonald's AI Drive-Thru Allegedly Collected Biometric Customer Data without Consent, Violating BIPA
McDonald's use of chatbot in its AI drive-through in Chicago was alleged in a lawsuit to have collected and processed voice data without user consent to predict customer information, which violated Illinois Biometric Information Privacy Act (BIPA).
- Event date
- 2021-10-15
- Country
- United States of America
- Severity
- Moderate
- Evidence state
- Single-source
Assessment status
Generated from available public incident evidence using OOF® governance methodology. It is not an official investigation, legal determination, regulatory finding, certification, or OOF® Approved Assessment.
View source record from AI Incident Database (Responsible AI Collaborative)
Assessment confidence dimensions
- Source corroboration
- Single-source
- Extraction completeness
- High
- Methodological assignment confidence
- Limited
Measures source-group corroboration only; it does not establish factual truth.
Measures populated source fields after deterministic normalization; it does not measure correctness.
Measures automated assignment support; substantive correctness requires authorized human review.
Known facts from the incident record
- The incident record identifies the event date as 2021-10-15.
- The incident record identifies the location as United States of America.
Reported claims
- McDonald's use of chatbot in its AI drive-through in Chicago was alleged in a lawsuit to have collected and processed voice data without user consent to predict customer information, which violated Illinois Biometric Information Privacy Act (BIPA).
Material unknowns
- Independent corroboration is not established in the available incident record.
Primary governance problem
The incident appears to expose a governance problem involving recognition, classification. Available reporting supports preliminary methodological interpretation, not a finding of fault or non-compliance.
Architecture intelligence
VFM® — Value Flow Mechanisms Architecture
Primary architecture
The reported recognition, classification concern falls within the governed questions represented by VFM® — Value Flow Mechanisms Architecture.
Governance focus: How should recognition, classification be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
CLIA® — Cognitive Governance Intelligence Architecture
Contributing architecture
The reported cognition, decision, reasoning concern falls within the governed questions represented by CLIA® — Cognitive Governance Intelligence Architecture.
Governance focus: How should cognition, decision, reasoning be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
Preliminary governance questions
- How should recognition, classification be governed in the conditions described by the available incident evidence?
- How should cognition, decision, reasoning be governed in the conditions described by the available incident evidence?
- What operational authority and controls applied to Mcdonald'S at the relevant time?
- What evidence would establish how Mcdonald'S Ai Drive Thru Voice Recognition System, Voice Recognition Systems, Biometric Data Processing Systems produced or enabled the reported outcome?
- What additional independent evidence is required to resolve the material evidence gaps?
Evidence gaps and limitations
- Only one independent source group is represented; corroboration is not established.
- AI technology is not specified in the source record.