The university outlet suggests the company could send customer data to M&M’s parent company, Mars.

The school’s administration hasn’t offered a clear timeline regarding the removal and replacement of the machines.

However, Invendia admits it locally processes “digital image maps” from a camera.

Facial recognition software discovered in college campus vending machines

According to a GDPR-compliant process, Invenda’s general advertising claims to only record anonymized data.

Still, another company in Canada was caught using similar technology to break privacy regulations on a massive scale.