If you thought state regulators were about to bring down the hammer on billionaire James Dolan for using facial recognition to target his personal enemies, think again. The long-running investigation by the New York State Liquor Authority into Madison Square Garden ended not with a bang, but with a slap on the wrist. After years of public outrage, legal threats, and bluster on morning television, the agency settled the matter with modest fines and a few regulatory tweaks.
For anyone holding out hope that government agencies would put a hard stop to corporate biometric surveillance, this outcome is a cold bucket of water.
It turns out that using facial recognition technology to scan thousands of unsuspecting ticket holders and block personal adversaries doesn't cost nearly as much as you'd think. A small fine is just a cost of doing business for a empire that controls Madison Square Garden, Radio City Music Hall, and the Beacon Theatre.
How James Dolan Turned Madison Square Garden Into a Surveillance Zone
The backstory here is as wild as it gets. A few years ago, MSG Entertainment instituted a policy banning any attorney whose law firm was actively suing Dolan or his companies. We aren't just talking about lawyers arguing the specific cases in court. If a law firm had 500 attorneys and one associate filed a slip-and-fall lawsuit against an MSG venue, all 500 attorneys were blacklisted from every property in the portfolio.
To enforce this ban, Dolan didn't rely on bouncers with printed photos. He deployed facial recognition software across every public entrance.
The system caught people completely off guard. In one notorious incident, a New Jersey attorney taking her daughter’s Girl Scout troop to see the Rockettes at Radio City Music Hall was stopped by security officers before she even cleared the metal detectors. She wasn't involved in any case against MSG. Her firm was. The algorithms matched her face from a picture on her law firm's public website, and guards escorted her off the premises while her daughter went inside.
When questioned about the tactic, Dolan didn't back down. He went on local television, cited The Godfather, and famously threatened to shut down alcohol sales at New York Rangers games just to spite state regulators. He argued that as a private property owner, he had every right to keep people who were suing him out of his house.
Why the State Liquor Authority Got Involved
You might wonder why a state alcohol regulator was leading the charge against high-tech surveillance.
New York law requires establishments with retail liquor licenses to remain open to the general public. You can't hold a public liquor license and then arbitrarily ban thousands of paying customers just because you dislike their employer. Doing so violates the core conditions of holding that permit.
Because MSG Entertainment holds lucrative liquor licenses across its iconic venues, the New York State Liquor Authority launched a formal inquiry. The threat was real. Losing the ability to serve beer and cocktails at Knicks games, Rangers games, and arena concerts would cost MSG tens of millions of dollars every year.
That leverage gave privacy advocates hope. It looked like state regulators finally had a tight grip on corporate overreach.
The Fine Is Barely a Drop in the Bucket
Instead of stripping licenses or imposing structural bans on biometric scanning, the inquiry wrapped up with modest financial penalties and compliance agreements. For a corporation generating hundreds of millions in revenue every quarter, paying a minor regulatory fine is a tiny fee for running an invasive surveillance apparatus.
It sends a clear message to other large venue operators. If you want to use biometric technology to track customers, create watchlists, or retaliate against critics, the financial penalty for stepping out of line is negligible.
The core issue was never just about lawyers getting kicked out of basketball games. It was about the normalization of private biometric databases. When you walk through the turnstiles at a stadium or music venue, your face is scanned, analyzed, and stored against database profiles.
When data breaches occur, those biometric scans end up in dark web forums alongside credit scores and risk assessments. That isn't a hypothetical risk. MSG Entertainment itself has faced massive class-action litigation over sensitive visitor data and internal security files leaking online.
Why Existing Privacy Laws Fall Short
The settlement highlights a glaring hole in state and federal privacy statutes. Most regulatory bodies were built in the 20th century to oversee physical operations, like checking IDs at a bar or making sure emergency exits aren't chained shut. They were never equipped to police advanced artificial intelligence and facial recognition.
Here is where current legal frameworks break down:
- Lack of clear consent: Tacking a tiny notice onto the back of an event ticket saying "this venue uses biometric technology" isn't true consent. If you want to see your favorite team or concert, you have no option to opt out.
- Scope creep: What starts as security monitoring quickly morphs into corporate scorekeeping. Tracked lists expand from legitimate safety risks to lawyers, journalists, union organizers, and critics.
- Weak enforcement tools: Agencies like the State Liquor Authority can only enforce rules tied directly to their narrow mandates, like public accommodation laws. They don't have the statutory authority to ban biometric scanning outright.
Legislators in Albany have introduced bills to explicitly ban facial recognition at places of public accommodation, but those measures face heavy opposition from venue owners and tech vendors who lobby hard to keep the technology legal.
Practical Steps to Protect Your Biometric Privacy Today
While regulators figure out how to handle venue surveillance, you can take concrete steps to limit your biometric exposure when attending large events.
- Know your local rights: Check if your state or city has specific biometric privacy statutes. In places with strict laws, venues must obtain explicit written consent before capturing biometric data, giving you grounds for legal recourse if they collect it without permission.
- Opt out of digital ticketing extras: Many venue apps ask for photo uploads or "expedited entry" face scans during ticket setup. Never opt into these convenience features. Stick to traditional mobile barcodes or physical tickets whenever possible.
- Audit your public digital footprint: Surveillance databases often scrape public images from company bios, firm websites, and social media. Using privacy settings on social accounts limits the easily scrapeable images available to corporate data brokers.
- Support legislative oversight: Follow updates from privacy advocacy groups like the Surveillance Technology Oversight Project (S.T.O.P.). Pushing for comprehensive state-level privacy legislation remains the only reliable way to put firm legal limits on private corporate surveillance.
