advertisement
advertisement

This is page 3 of:

Wal-Mart’s Wine Kiosk Move Raises An Oak Barrel Full Of Legal Nightmares

March 30th, 2011

But in the store, you get a much better idea of the age of a person than you do on TV. You might also see the pair of 15 year olds hanging around outside the store waiting to take possession of the alcohol the purchaser just bought. So who has the responsibility for verifying age, and who has the criminal liability if it isn’t done? It is, of course, the “seller.” And who is the “seller” in this transaction? Stop me if you have heard this before—we don’t know.

Another issue for robo-bartenders is one of records retention: by law, by policy and as a practical matter. Of course, certain records relating to the transaction have to be created and stored; the credit-card verification process, for example. Those records have to be maintained under PCI rules and under contracts with the financial institutions to validate the fact of, and the amount of, the transaction in question (the machines don’t take cash.)

But what about the other information: the video stream, the breathalyzer data, the calibration of the breathalyzer, the driver’s license data, the license verification information, the link showing that the purchaser’s license was actually checked, the log records of refusals to show that a transaction was refused (and the reason for the refusal)? Are such records retained? Are they subject to discovery? Are they subject to grand jury subpoena? Can the police access such records?

Under the Pennsylvania scheme, the only records that are presumably kept are the PCI records related to the transaction, and logs of refusals. But I doubt that this is actually the case. The manufacturer must keep records relating to the maintenance of the kiosk and the embedded breathalyzer to show that it was working. If the state motor vehicle office verifies that the license is valid (as opposed to merely reading the barcode on the back of the license), then a record of this check may be kept, too.

All of these things are important, because of potential liability to the merchant. Imagine if a customer walks into the local Wal-Mart (captured on video) and tries to buy a bottle of wine but is refused because his BAC is 0.1—well above the legal limit. The disgruntled and intoxicated customer now staggers to the parking lot, where he runs over an elderly couple (also captured on video).

The store might be deemed to have known—or reasonably should have known—that the driver was drunk. A jury might determine that the store should have done something to stop him (even though it didn’t serve him). And what if a person is arrested in the parking lot for DUI and wants to subpoena the records of the robo-vendor to show that he successfully bought alcohol, thereby creating a prima facia case that he was not drunk? Do these records exist?

Unlike a human being, a kiosk cannot exercise judgment. It cannot (unless programmed to) confiscate the fake ID used by an underage college student. It cannot determine if the consumer is acting “weird” or dangerous. It cannot report to the police a criminal attempt to purchase alcohol unlawfully. It can only dispense its contents under circumstances where it is programmed to do so. So that kiosk in your store can be programmed to be a licensed liquor store or a mini police precinct. It may be more trouble than it is worth.

If you disagree with me, I’ll see you in court, buddy. If you agree with me, however, I would love to hear from you.


advertisement

2 Comments | Read Wal-Mart’s Wine Kiosk Move Raises An Oak Barrel Full Of Legal Nightmares

  1. Albert Brooks Says:

    With luck enough people will sue the PLCB to make them get rid of those stupid machines. They are insulting to the citizens of PA,

  2. A reader Says:

    If industry awaited legal opinions before innovating, we’d be afraid of moving from the trees into the caves, much less creating fire.

    Will there be there legal issues? Sure. And who better to work them out than the largest retailer on the planet, and the vast legal team they can obviously afford?

    I’m glad it’s them. They can work out those problems on their dime.

Newsletters

StorefrontBacktalk delivers the latest retail technology news & analysis. Join more than 60,000 retail IT leaders who subscribe to our free weekly email. Sign up today!
advertisement

Most Recent Comments

Why Did Gonzales Hackers Like European Cards So Much Better?

I am still unclear about the core point here-- why higher value of European cards. Supply and demand, yes, makes sense. But the fact that the cards were chip and pin (EMV) should make them less valuable because that demonstrably reduces the ability to use them fraudulently. Did the author mean that the chip and pin cards could be used in a country where EMV is not implemented--the US--and this mis-match make it easier to us them since the issuing banks may not have as robust anti-fraud controls as non-EMV banks because they assumed EMV would do the fraud prevention for them Read more...
Two possible reasons that I can think of and have seen in the past - 1) Cards issued by European banks when used online cross border don't usually support AVS checks. So, when a European card is used with a billing address that's in the US, an ecom merchant wouldn't necessarily know that the shipping zip code doesn't match the billing code. 2) Also, in offline chip countries the card determines whether or not a transaction is approved, not the issuer. In my experience, European issuers haven't developed the same checks on authorization requests as US issuers. So, these cards might be more valuable because they are more likely to get approved. Read more...
A smart card slot in terminals doesn't mean there is a reader or that the reader is activated. Then, activated reader or not, the U.S. processors don't have apps certified or ready to load into those terminals to accept and process smart card transactions just yet. Don't get your card(t) before the terminal (horse). Read more...
The marketplace does speak. More fraud capacity translates to higher value for the stolen data. Because nearly 100% of all US transactions are authorized online in real time, we have less fraud regardless of whether the card is Magstripe only or chip and PIn. Hence, $10 prices for US cards vs $25 for the European counterparts. Read more...
@David True. The European cards have both an EMV chip AND a mag stripe. Europeans may generally use the chip for their transactions, but the insecure stripe remains vulnerable to skimming, whether it be from a false front on an ATM or a dishonest waiter with a handheld skimmer. If their stripe is skimmed, the track data can still be cloned and used fraudulently in the United States. If European banks only detect fraud from 9-5 GMT, that might explain why American criminals prefer them over American bank issued cards, who have fraud detection in place 24x7. Read more...

StorefrontBacktalk
Our apologies. Due to legal and security copyright issues, we can't facilitate the printing of Premium Content. If you absolutely need a hard copy, please contact customer service.