The same tool can support people or police them. The difference is in what it keeps, who sees it, and how the people involved are told.
Keep events, not identities
Most business questions do not require knowing who anyone is. Knowing that Table 5 has had 3 people seated since 12:04 is enough to measure wait times and table turnover. A well-designed system therefore keeps only events and numbers, and does not recognise customers' faces.
Keep the video on site
The further footage travels, the greater the risk. Analysing video on a machine inside the restaurant and sending out only numbers means footage of customers and staff does not have to leave the premises, except when an authorised person opens the live view.
Tell everyone clearly
Post a notice for customers, and tell staff in writing that video is analysed by AI and what it is for. If staff are identified, for example for attendance check-in, always get their explicit consent first.
Reports that show facts without ranking the worst performer help the team see the system as a tool that helps with the work, not one that punishes.
Please note
This article is general guidance, not legal advice. Businesses should consult a legal adviser about PDPA before going live.