People counting without cameras

Yes. The Wi-Fi access points a building already runs can count its visitors without a camera. They pick up the signals phones give off, turn them into counts and flows, and keep only aggregated statistics. No picture is taken and no one is identified. Doorways that need an exact count can use LiDAR, which needs no camera either.

The short version

• Existing Wi-Fi access points can count visitors across a building without a camera, and coverage reaches wherever the network does.
• Phone signals become counts, dwell and paths between zones; only aggregated statistics remain.
• LiDAR gives an exact count at a doorway with no camera and no image.
• Counts are calibrated against manual counting sessions, so they hold at the aggregate level.
• Whether a DPIA is needed is for your own DPO or compliance function to decide.

Can we count visitors across the floor and at the doors without cameras?

Yes, and two methods share the job. Wi-Fi counting covers the floor through the access points already in the building and gives counts, dwell and paths between zones. LiDAR handles a doorway where an exact count matters, and it measures with laser pulses, so no image exists.

Fitting optical counters at every entry point, zone boundary, escalator and lift lobby takes project planning, cabling and ongoing hardware maintenance. Wi-Fi counting works with the access points that facilities or IT already manage for connectivity, so coverage extends wherever the network does and, in most buildings, the ceiling needs no new hardware.

A shopping centre with dozens of access points across five floors gets zone-level analytics on all five, far more than a headcount at the front door would show. For museums and cultural venues or public transportation hubs, that level of detail is usually within reach without a cabling project, and the data deliverables are richer because the counting covers the whole building. No extra camera has to be justified to a planning authority or pointed at a queue.

What do Wi-Fi access points pick up from a phone?

A phone with Wi-Fi switched on sends probe requests, short signals that ask whether a known network is nearby. Access points in range pick them up. Each probe once carried a unique hardware identifier, the MAC address, which in principle allowed one specific device to be followed across time and space.

Apple introduced MAC address randomisation in iOS 8 in 2014; Android followed from version 8 onwards.

Devices now send probe requests with randomised MAC addresses, which change over time and differ per network, instead of a fixed hardware ID, so a fixed hardware address no longer follows a device across time. The privacy of a counting system still depends on what the system does with the signals afterwards.

What is left once the signals have been processed?

The Wi-Fi-based people counting approach anonymises the signals at the point of collection. Probe requests are processed into counts and flow statistics, and the underlying signal data is not stored. What persists is aggregate: how many devices were detected in a zone during a given hour, how long the average dwell was, which route through a space was most common. No row in any database corresponds to a person.

A GDPR-compliant footfall analytics system built on Wi-Fi counting does not require visitor consent to operate. Consent applies where personal data is processed, and this method processes none. That is also why it is the only footfall method in Europe approved by a data protection authority.

How do we know the counts are right?

The system never sees individuals, so it relies on calibration to check its counts. Counts derived from Wi-Fi signals are validated against manual counting sessions: a known number of people walks through a zone, and the system’s estimate is adjusted to match. Calibration also corrects for the share of visitors carrying a Wi-Fi-enabled device, which varies by location and time. Other methods are compared in how to count visitors.

Accuracy is high at the aggregate level, and that is the level operational and strategic decisions need. A retailer needs to know whether 2,000 or 4,000 people came through on a Saturday, and answering that takes no census of individuals. Calibration also makes the count comparable across sites and seasons, and that comparability is what a footfall benchmark is worth. The count is also the denominator the till cannot supply: set against sales, it gives the conversion rate behind why footfall and sales tell different stories.

MAC randomisation, now standard on modern devices, is handled at the algorithmic level without reverting to persistent identifiers, so the statistical output remains reliable.

What does a data protection review of Wi-Fi counting cover?

For organisations subject to GDPR, a DPIA for people counting is the formal step for assessing a technology before it is deployed. Whether one is needed, and what it must cover, is decided by your own data protection officer or compliance function. The method produces no special category data, needs no consent mechanism and leaves no data subject rights to administer. The questions a DPO typically asks are set out on that page.

What will staff and their union say?

The measurement is anonymous. Wi-Fi counting produces no personal data, so no one, staff or visitor, can be picked out in the results, and no individual is followed over time. What staff and their representatives see is aggregate statistics about the space: how many people were there, where and when, never who.

What changes for visitors when there is no camera?

Camera-based systems can do things Wi-Fi counting cannot: they can distinguish adults from children, count people in images with high precision, and in some configurations recognise repeat visitors. Those capabilities are also where public discomfort comes from. Facial recognition attached to retail analytics has generated regulatory attention across Europe, and even where cameras are not running recognition, visitors in public spaces increasingly notice them and ask questions. A visible camera can look like surveillance even when it is only counting, and the friction costs something in visitor experience, in staff time and occasionally in press coverage.

Wi-Fi counting points no camera at visitors and captures no image of them. That matters most where trust is part of the visit: cultural institutions, public transit and healthcare facilities. It matters increasingly in retail too, as people-counter versus analytics decisions get closer scrutiny.

Where a doorway needs an exact count and a lens is unwelcome, LiDAR people counting gives a precise count with no camera at all. It measures movement with pulses of eye-safe laser light and shows people as clusters of points in 3D space. No picture is ever made, so there is nothing to store, blur or mask.

Sources

• Apple (2014). iOS Security (white paper, October 2014). https://www.apple.com/mx/privacy/docs/iOS_Security_Guide_Oct_2014.pdf
• Android Open Source Project. Implement MAC randomization. https://source.android.com/docs/core/connect/wifi-mac-randomization
• Martin, J., Mayberry, T., Donahue, C., Foppe, L., Brown, L., Riggins, C., Rye, E. C., & Brown, D. (2017). A study of MAC address randomization in mobile devices and when it fails. Proceedings on Privacy Enhancing Technologies, 2017(4), 365–383. https://doi.org/10.1515/popets-2017-0054
• European Data Protection Board (2020). Guidelines 3/2019 on processing of personal data through video devices, version 2.0. https://www.edpb.europa.eu/documents/guideline/guidelines-32019-on-processing-of-personal-data-through-video-devices_en
• European Parliament and Council of the European Union (2016). Regulation (EU) 2016/679 (General Data Protection Regulation), Recital 26 and Article 35. https://eur-lex.europa.eu/eli/reg/2016/679/oj