The framework is cloud-based and lets stores, schools and other facilities contribute their data to registries.

The limitations of the system are quite clear. It’s based on voluntary submissions, so it’s most likely to be used by those eager to promote privacy — if it’s not in the registry, you won’t know about it. A business determined to track its workers may be reluctant to let staff know they’re being monitored, let alone give them a chance to opt out. This also assumes that there are enough people concerned about privacy to download an app and check if the sensor over their head is a privacy risk. The Carnegie team is betting that companies and institutions will use the infrastucture to ensure they’re obeying rules like the California Consumer Privacy Act and Europe’s General Data Protection Regulation, but there’s no guarantee they’ll feel pressure to adopt this technology.