Over the two years until July 2022, Kmart captured the facial data of "tens or hundreds of thousands" of customers at store entrances and return counters

[...] after a three-year investigation, privacy commissioner Carly Kind found Kmart's use of FRT was disproportionate, and the company did not gain consent to use it on shoppers

As part of the finding, Kmart has been ordered not to repeat the practice in the future, and will have to publish a statement on its website within 30 days explaining its use of FRT and the regulator's finding against it

TL;DR: As usual for this sort of thing, Kmart faces no real consequences (not even a fine ffs!). Meanwhile the Australian government is pushing forward with its mandatory age verification laws in spite of (or because of..) huge public backlash. I hate this country