Personally Identifiable Information in Robotics Data

A head- or wrist-mounted camera captures whatever is in front of it, which means PII shows up incidentally as often as it shows up on purpose. The categories that recur in egocentric and robot-learning footage are faces and heads (including bystanders, reflections, and partial or profile views), licence plates, on-screen or printed text such as phone screens, monitors, forms, badges and mail, and spoken identifiers — names, addresses, and numbers — in the audio track.

This guide is general information about how PII typically appears in robotics capture and how Firsthand handles it, not legal advice. What counts as personal data, and what obligations follow, depends on your jurisdiction and use case — confirm specifics with counsel.

No — they answer different questions and both are needed. De-identification (blurring faces, plates, screens, scrubbing speech) reduces the risk that an un-consented bystander is identifiable in the delivered footage. It does not substitute for a documented release from the actual participant performing the recorded activity, whose face and hands are the training signal and are deliberately left intact. A dataset needs both: bystander PII removed, and participant consent documented.

Reversible masking — a blur that could be switched off, or a separate un-redacted master kept alongside the delivered file �� leaves the underlying PII recoverable, which keeps the footage in scope as personal data rather than removing it from scope. Firsthand’s blur is baked into the delivered pixel data with no un-blurred master shipped and no key to reverse it, and the pass fails closed: if a reviewer is unsure a region is fully covered, the episode is held or discarded rather than downgraded and shipped.

Each episode in the batch data card lists the de-identification pass, the detector version, and the reviewer who confirmed it, so the claim is checkable per file rather than taken on assurance. That record sits alongside the consent artefact IDs for the same episode, which is what makes the two separate checks — PII removed, participant consent documented — auditable together.