That was what I was going to say. All the stores need to do is warn potential customers that by entering the stores premises the potential customer agrees to x technology being used for the purpose of y. It's the potential customers choice then, leave or enter.
Next step: every big company/store requires a written authorization to enter. Back to square one.