The Domino's AI Order System Was Taking Voice Prints. Customers Were Never Told.

What happened

When Illinois customers called a Domino's location to place an order, they spoke to an automated voice system built by ConverseNow Technologies and sold to Domino's under the name DOMOperator. The system handled their order, confirmed their address, and processed payment. It also captured their voice prints, a distinct biometric identifier derived from the acoustic properties of a person's speech, and stored them alongside their name, address, phone number, and credit card information. None of that was disclosed.

DOMOperator was deployed at at least 57 Domino's locations across Illinois by March 2024, when three customers, Odilon Garcia, Jonathan Neumann, and Zachery Young, filed a proposed class action against Domino's and ConverseNow. Their claim: both companies violated the Illinois Biometric Information Privacy Act, which requires any organization collecting biometric identifiers to obtain written consent before collection, publish a retention policy, and refrain from profiting from that data without explicit authorization.

BIPA is one of the strictest biometric privacy laws in the United States, and Illinois courts have enforced it with meaningful penalties. The law was designed for exactly this kind of scenario: a company deploys a system that happens to capture biometric data, frames the collection as incidental to a service benefit, and skips the disclosure step. The plaintiffs sought injunctive relief, statutory damages, and attorney fees, and the suit raised the possibility of per-violation penalties that could scale with every customer who passed through 57 stores.

What makes this more than a standard privacy complaint is the pairing of biometric data with payment and personal information. A voice print is not like a phone number that can be changed after a breach. It is permanent. The customers who called to order a pizza had no reason to expect they were simultaneously enrolling in a biometric database, and Domino's gave them no mechanism to opt out of something they did not know was happening. ConverseNow's pitch to restaurant operators was efficiency and sales lift; customer consent was not part of the product's described value.

Illinois law puts the disclosure obligation squarely on the collecting entity, but enforcement depends entirely on customers finding out what was taken from them and then choosing to pursue it. A system that kept a provable record of what a deployment collected, when each voice print was captured, and what consent mechanism was active at that moment would make that accountability immediate rather than recoverable only through litigation. Right now, the only way to learn what a voice AI took from you is to file suit and find out.

Reported impact

Affected parties

Not publicly disclosed

Harm type

Not publicly disclosed

Scale

Not publicly disclosed

Financial impact

Not publicly disclosed

Regulatory action

Not publicly disclosed

Classification

Organization

Not publicly disclosed

AI system

Not publicly disclosed

Industry

Not publicly disclosed

Country

Not publicly disclosed

Provider

Not publicly disclosed

Incident type

Not publicly disclosed

Relevant governance controls

Governance control mapping is not available for this record.

• No controls mappedNot publicly disclosed

Control mapping is analytical. It does not state that any control would have prevented the incident.

Sources and evidence

This record was researched and written by the Index. The event is also catalogued in the following database, which is listed for cross-reference.