Skip to main content

How to Utilise WiFi Analytics to Enhance Customer Experience

This authoritative guide demonstrates to IT managers, network architects, and venue operations directors how to transform guest WiFi into a customer experience engine by capturing footfall, dwell time, and behavioural data. It covers the full technical architecture — from probe-request capture and trilateration to captive portal authentication and CRM integration — alongside practical deployment guidance, GDPR compliance requirements, and measurable ROI frameworks. Real-world scenarios from retail and hospitality demonstrate how WiFi analytics data translates directly into layout optimisation, dynamic staffing, and personalised loyalty engagement.

📖 8 min read📝 1,861 words🔧 2 examples3 questions📚 9 key terms

🎧 Listen to this Guide

View Transcript
How to Use WiFi Analytics to Improve Customer Experience. A Purple WiFi Intelligence Briefing. Welcome to the Purple Intelligence Briefing. I'm your host, and today we're cutting straight to the point on a topic that's generating serious commercial interest across hospitality, retail, transport, and public sector organisations: how to use WiFi analytics to improve customer experience. If you're an IT manager, a network architect, or a venue operations director, you've probably already deployed guest WiFi. But here's the question: are you actually using that network as a data asset, or is it just a cost line on your infrastructure budget? Because the organisations that are genuinely winning on customer experience right now are the ones treating their wireless network as a sensor grid — a real-time intelligence layer across their physical estate. That's what we're going to unpack today. We'll cover the technical architecture, the practical implementation steps, the common pitfalls that derail deployments, and we'll close with a rapid-fire Q&A on the questions I get asked most often. Let's get into it. [TECHNICAL DEEP-DIVE] So let's start with the fundamentals. How does WiFi analytics actually work? Every mobile device — every smartphone, tablet, laptop — continuously broadcasts what are called probe requests. These are signals your device sends out, looking for known networks. Your access points pick these up. And from that signal, you can extract two critical pieces of information: the device's MAC address, which is a unique hardware identifier, and the RSSI — the Received Signal Strength Indicator — which tells you how far away the device is from each access point. Now, from RSSI readings across multiple access points, you can calculate a device's approximate location through a process called trilateration. Think of it like GPS, but using your WiFi infrastructure instead of satellites. In a well-deployed network, you can achieve location accuracy of between three and five metres. That's good enough to know whether someone is in your restaurant, your retail floor, or your hotel lobby. This gives you two foundational analytics capabilities. First, presence analytics — simply knowing how many devices, and therefore how many people, are in your venue at any given time. That's your footfall metric. Second, location analytics — tracking where those devices move within your venue, how long they spend in specific zones, and what paths they take. That's your dwell time and journey mapping data. Now, here's where it gets commercially interesting. Aggregate footfall data is useful for operational planning. But to deliver genuine customer experience improvements — personalisation, loyalty recognition, targeted engagement — you need to move from anonymous device tracking to authenticated user profiles. And that's where the captive portal comes in. When a guest connects to your WiFi and logs in — whether through email, a social login, or a loyalty programme account — you've just resolved that anonymous MAC address to a real person. You know who they are, you have their consent to market to them, and you can now tie all their future visits and behaviours back to that profile. This is the fundamental architecture of a WiFi analytics platform. You have your access points collecting raw signal data. You have an analytics engine — either cloud-hosted or on-premises — processing that data, filtering out noise, and generating metrics. And you have an integration layer connecting those insights to your CRM, your marketing automation platform, and your operational dashboards. Let me talk about a specific deployment scenario to make this concrete. Consider a large regional shopping centre — let's say 80 retail units across two floors. They deploy a guest WiFi network with captive portal authentication. Within the first month, they've captured verified profiles for 45,000 unique visitors. They've mapped the venue into 12 analytics zones corresponding to different retail categories. The data immediately reveals something counterintuitive: the food court, which management assumed was the primary dwell zone, actually has a lower average dwell time than the electronics and home goods sections. Customers are grabbing food and leaving. But they're spending 12 to 15 minutes browsing electronics. Armed with this insight, the centre repositions two anchor tenants and redesigns the signage flow to draw footfall from the entrance through the electronics corridor. Three months later, average dwell time across the centre is up 18 percent, and tenant sales in the electronics zone are up 23 percent. That's a direct, measurable CX improvement driven entirely by WiFi analytics data. Now, there's an important technical wrinkle I need to address: MAC randomisation. From iOS 14 onwards, and Android 10 onwards, mobile devices no longer broadcast their real hardware MAC address when probing for networks. They use a randomised, temporary address. This is a privacy protection feature, and it's a good thing for consumers — but it does break passive, unauthenticated tracking. The practical implication is this: if you're relying on passive probe data to track repeat visitors over time, your data is fundamentally unreliable. The same physical person may appear as dozens of different devices across multiple visits. The only reliable solution is authenticated tracking — getting users to log in via the captive portal or, increasingly, via Passpoint or OpenRoaming, which are industry standards that allow seamless, automatic, secure connections without a manual login step. Passpoint, which is based on the IEEE 802.11u standard, essentially allows your WiFi network to behave like a cellular network. A user's device automatically authenticates using credentials stored on the device, without any user interaction. The connection is encrypted using WPA3 Enterprise, which is the current gold standard for wireless security. And from an analytics perspective, you get a verified, persistent identity for every connection. For hospitality environments in particular, this is transformative. A hotel guest who connects on day one of their stay will automatically reconnect on every subsequent visit — and you'll know it's the same person every time. [IMPLEMENTATION RECOMMENDATIONS AND PITFALLS] Right, let's talk about implementation. What does a successful deployment actually look like, and where do teams typically go wrong? The first thing to get right is infrastructure. WiFi analytics is not just a software layer you bolt onto an existing network. Your access point placement needs to be designed for location accuracy, not just coverage. The most common mistake I see is APs deployed in a straight line down a corridor — what we call the hallway effect. When your APs are collinear, trilateration becomes mathematically impossible. You need staggered placement, ideally in a triangular or hexagonal pattern, with overlapping coverage zones. The second critical element is zone definition. Before you go live, map your venue into logical zones that correspond to real business questions. Don't just draw arbitrary boundaries. Think about what decisions you need to make: where to place staff, which product categories to promote, where to invest in signage. Your zones should reflect those decision points. Third: consent and compliance. This is non-negotiable. Under GDPR, you must have a lawful basis for processing personal data. For WiFi analytics, that means explicit, informed consent obtained through the captive portal. Your privacy notice must clearly explain what data you're collecting, how you're using it, and how users can request deletion. Get this wrong, and you're looking at regulatory exposure that far outweighs any commercial benefit. The biggest pitfall I see in deployments is the data-to-action gap. Teams invest in the analytics platform, generate beautiful dashboards, and then nothing changes. The data sits in a portal that nobody looks at. To avoid this, you need to define your CX use cases before you deploy. What specific decisions will this data inform? Who owns those decisions? How will insights flow from the analytics platform to the people who can act on them? [RAPID-FIRE Q&A] Let's do a quick Q&A on the questions I hear most often. How accurate is WiFi location tracking? In a well-deployed network with adequate AP density, you can expect three to five metre accuracy. For zone-level analytics — knowing which room or department a customer is in — that's more than sufficient. For precise indoor positioning at sub-metre accuracy, you'd need to supplement with UWB or BLE beacons. Can I use this data for GDPR marketing? Yes, but only with explicit consent. The captive portal login is your consent mechanism. Make sure your privacy notice is clear and your data retention policies are documented. What's the ROI timeline? Most organisations see measurable operational improvements within 60 to 90 days of deployment — primarily through staffing optimisation and layout changes. Loyalty and personalisation benefits typically materialise over a 6 to 12 month horizon as your authenticated user base grows. [SUMMARY AND NEXT STEPS] Let me bring this together. Your guest WiFi network is already generating data. The question is whether you're capturing and acting on it. The key principles to take away are these: move from passive presence analytics to authenticated user profiles as quickly as possible; design your AP infrastructure for location accuracy, not just coverage; define your CX use cases before you deploy, not after; and treat consent and compliance as foundational, not an afterthought. For your next steps: conduct an infrastructure assessment to determine whether your current AP placement supports location analytics. Define three to five specific CX questions you want the data to answer. And evaluate whether your current WiFi platform has the analytics and integration capabilities you need — or whether it's time to upgrade. If you want to go deeper on footfall measurement specifically, Purple has a comprehensive guide on WiFi footfall analytics available at purple dot ai. And if you're ready to explore what a full deployment looks like for your venue, the team at Purple would be happy to walk you through it. Thanks for listening. I'll see you in the next briefing.

header_image.png

Executive Summary

For IT leaders, network architects, and venue operations directors, the guest WiFi network is no longer simply a cost centre or a basic amenity — it is a critical sensor network for physical spaces. By capturing and analysing data from device connections, organisations can answer the fundamental question of how to enhance customer experience with WiFi. This guide provides an authoritative, vendor-neutral framework for deploying Guest WiFi and utilising a WiFi Analytics platform to transform footfall, dwell time, and movement data into actionable business intelligence.

From dynamic staffing models in transport hubs to optimised floor layouts in retail chains and personalised loyalty recognition in hotels, the use cases are concrete and the ROI is measurable. The guide addresses the full deployment lifecycle: infrastructure assessment, captive portal design, zone mapping, CRM integration, and ongoing compliance with GDPR and IEEE 802.1X standards. Whether you are evaluating a first deployment or looking to extract more value from an existing network, this guide provides the technical depth and practical frameworks to make that decision this quarter.

Technical Deep-Dive: How WiFi Analytics Works

To understand how to measure customer experience through wireless networks, it is necessary to examine the underlying architecture of location-based services (LBS) and WiFi analytics from the ground up.

Data Capture Mechanisms

Every mobile device continuously broadcasts probe requests — signals sent out to discover available networks. Even before a user actively connects, your access points (APs) can detect the device's MAC address and its Received Signal Strength Indicator (RSSI). This passive detection is the foundation of presence analytics: knowing how many devices, and therefore how many people, are in your venue at any given moment.

When RSSI readings are combined across three or more APs, the analytics engine can calculate a device's approximate physical location through trilateration — the same geometric principle used by GPS, applied to your wireless infrastructure. In a properly deployed network, this achieves location accuracy of three to five metres, which is sufficient to determine whether a customer is in your restaurant, your electronics department, or your hotel lobby.

Location analytics extends this capability to track movement over time: which zones a device visits, in what sequence, and for how long. This produces the dwell time and customer journey data that directly informs CX decisions.

wifi_analytics_data_flow.png

The Authentication Layer: From Anonymous to Known

Aggregate footfall data is operationally useful, but genuine CX personalisation requires resolving anonymous MAC addresses to verified user profiles. This is achieved through the authentication layer.

The captive portal is the traditional mechanism: a web page presented to users before network access is granted, where they exchange basic demographic data (email address, age, gender, marketing consent) for internet access. When a user completes this login, the anonymous MAC address is permanently tied to a known profile. Every subsequent visit, every zone traversal, and every dwell time measurement is now attributable to a real person.

For higher-friction environments where captive portals reduce adoption, Passpoint (Hotspot 2.0) — standardised under IEEE 802.11u — provides a cellular-like automatic authentication experience. The user's device connects seamlessly using credentials stored on the device, encrypted via WPA3 Enterprise. Platforms like Purple act as identity providers within this framework, enabling persistent, consent-driven identity resolution without requiring manual login at every visit. For a broader view of how connected device architectures underpin this, see our Internet of Things Architecture: A Complete Guide .

Data Processing and Integration

Raw probe data is inherently noisy. An enterprise-grade analytics engine must handle MAC randomisation filtering, session deduplication, and zone boundary calculations before generating reliable metrics. The processed data is then surfaced via APIs to downstream systems:

Integration Target Data Consumed CX Action Enabled
CRM Platform Visit frequency, dwell time, zone history Profile enrichment, loyalty tier updates
Marketing Automation Real-time location, consent flags Triggered location-based campaigns
Operational Dashboard Live footfall, zone density Dynamic staffing, queue management
BI / Data Warehouse Historical trends, cohort analysis Layout optimisation, capacity planning

Implementation Guide: Deploying for CX Impact

A successful WiFi analytics deployment requires structured planning across four phases.

Phase 1: Infrastructure Assessment

Before any software configuration, validate that your wireless infrastructure supports location analytics. This is not purely a coverage exercise — AP placement must be optimised for trilateration accuracy.

AP Density and Placement: For zone-level accuracy (3–5 metres), APs should be deployed with overlapping coverage in a staggered, triangular pattern. Avoid collinear placement along corridors — the "hallway effect" makes trilateration geometrically imposssible and produces unreliable zone data. Perimeter APs are critical for defining the venue boundary and distinguishing internal visitors from passers-by.

Controller Configuration: Ensure your WLAN controller supports continuous scanning and reporting of unassociated client data. Many enterprise controllers require specific licensing for location services — validate this before committing to a deployment timeline.

The captive portal is your primary data collection touchpoint and your legal basis for processing personal data under GDPR.

Keep the login flow to three steps or fewer. Offer social login options (Google, Apple, Facebook) to reduce drop-off rates — venues typically see 40–60% higher completion rates with social login versus email-only forms. The privacy notice must clearly state what data is collected, the purpose of processing, retention periods, and how users can exercise their rights. Obtain explicit opt-in consent for marketing communications as a separate, unchecked checkbox.

Phase 3: Zone Definition and Mapping

Map your venue into logical analytics zones that correspond to real business decisions. A retail environment might define zones by product category; a hospital by department; a stadium by concourse section. Zone boundaries should reflect the physical layout and the AP coverage map — not arbitrary administrative divisions.

For more granular indoor positioning requirements, particularly in complex multi-floor environments, consider supplementing WiFi analytics with BLE beacons or UWB anchors. See our Indoor Positioning System: UWB, BLE, & WiFi Guide for a detailed comparison of technologies.

Phase 4: Integration and Activation

Connect the analytics platform to your broader technology stack via REST APIs or native connectors. The key integrations are CRM (for profile enrichment), marketing automation (for triggered campaigns), and operational dashboards (for real-time staffing decisions). Define the specific CX use cases each integration will serve before go-live — this prevents the common failure mode of deploying a platform that generates data nobody acts on.

dwell_time_heatmap_retail.png

Best Practices by Vertical

The principles of WiFi analytics are consistent, but the CX applications vary significantly by industry.

Retail: Layout Optimisation and Conversion

For Retail environments, the primary use cases are zone traffic analysis, dwell time benchmarking, and repeat visit tracking. Identify "cold zones" — areas with low footfall relative to their floor space — and correlate them with product category performance. Use dwell time data to evaluate whether promotional displays are generating engagement or simply occupying space. Track the repeat visit rate of authenticated users as a proxy for loyalty programme effectiveness.

Hospitality: VIP Recognition and Personalisation

In Hospitality , recognising returning guests before they reach the front desk is a high-impact CX differentiator. When a loyalty member's device connects to the hotel's perimeter WiFi, an API webhook can trigger an alert on the concierge's operational dashboard — surfacing the guest's profile, preferences, and stay history before any verbal interaction occurs. This transforms a transactional check-in into a personalised arrival experience.

Healthcare: Patient Flow and Wayfinding

In Healthcare environments, reducing patient anxiety and wait times directly improves the care experience. WiFi analytics can identify bottlenecks in patient routing — areas where dwell time significantly exceeds the expected service time — enabling operational interventions. Digital wayfinding services, powered by the same location infrastructure, reduce the cognitive load on patients navigating complex facilities.

Transport: Real-Time Congestion Management

For Transport hubs — airports, rail terminals, ferry ports — real-time density monitoring is critical for both safety and service quality. WiFi analytics provides a live view of crowd distribution across security lanes, boarding gates, and retail concourses, enabling dynamic staff deployment to alleviate bottlenecks before they become service failures. For automotive and in-vehicle connectivity contexts, see our Wi Fi in Auto: The Complete 2026 Enterprise Guide .

Troubleshooting and Risk Mitigation

MAC Randomisation

Apple introduced per-network MAC randomisation in iOS 14 (2020); Android followed with Android 10. The practical effect is that passive, unauthenticated tracking of repeat visitors is no longer reliable — the same physical device may present dozens of different MAC addresses across multiple visits.

Mitigation: Shift your measurement strategy to rely on authenticated sessions exclusively for longitudinal tracking. Captive portal logins and Passpoint connections both provide persistent identity resolution that is immune to MAC randomisation. Use unauthenticated probe data only for aggregate, real-time footfall counts where individual identity is not required.

Poor Location Accuracy

Inaccurate zone data produces flawed business decisions. The most common causes are insufficient AP density, collinear AP placement, and RF interference from structural elements.

Mitigation: Conduct a dedicated RF site survey before finalising AP placement. Use the analytics platform's calibration tools to validate zone boundary accuracy against physical walkthroughs. Revisit the survey annually or after significant structural changes to the venue.

Data Privacy and Compliance

Mishandling personal data collected via guest WiFi carries significant regulatory exposure under GDPR (fines of up to 4% of global annual turnover) and reputational risk.

Mitigation: Implement a documented data retention policy — most organisations apply a 12-month rolling window for behavioural data. Ensure the captive portal consent flow is reviewed by legal counsel. Maintain a Record of Processing Activities (ROPA) entry for the WiFi analytics programme. For venues processing payment card data, verify that the guest WiFi network is appropriately segmented from PCI DSS-scoped infrastructure.

ROI and Business Impact

To justify the investment in a WiFi analytics platform, focus on three measurable outcome categories.

Operational Efficiency: Dynamic staffing based on real-time footfall data typically reduces labour costs by 8–15% in high-variability environments (retail, hospitality, transport) by aligning headcount to actual demand rather than historical schedules.

Revenue Uplift: Targeted, location-triggered promotions delivered via the captive portal or post-visit email campaigns consistently outperform untargeted communications. Venues report 15–25% higher redemption rates on location-contextualised offers versus generic campaigns.

Loyalty and Retention: Tracking the return visit rate of authenticated users provides a direct measure of loyalty programme effectiveness. Personalised recognition at the point of arrival — enabled by WiFi-triggered CRM alerts — demonstrably increases guest satisfaction scores in hospitality deployments.

For a comprehensive framework for measuring and acting on these metrics, refer to our guide on WiFi Footfall Analytics: How to Measure and Act on Visitor Data . Spanish-language version also available: Análisis de afluencia WiFi: Cómo medir y actuar sobre los datos de los visitantes .

Outcome Category Typical Metric Expected Range
Operational Efficiency Labour cost reduction 8–15%
Revenue Uplift Location-triggered offer redemption rate 15–25% above baseline
Loyalty Repeat visit rate (authenticated users) +10–20% YoY with active personalisation
CX Score NPS / CSAT improvement +5–12 points over 12 months

Key Terms & Definitions

Footfall Analytics

The measurement of the total number of unique devices (people) entering a defined physical space over a specific period, derived from WiFi probe detection or authenticated connection data.

Used by operations directors to gauge venue popularity, optimise staffing levels, and measure the physical impact of marketing campaigns. Baseline metric for all WiFi analytics deployments.

Dwell Time

The duration a connected or probing device remains within a specific analytics zone or the overall venue perimeter.

Critical for retailers measuring engagement with specific product categories, for transport hubs identifying queue bottlenecks, and for hospitality operators benchmarking lounge and F&B utilisation.

MAC Randomisation

A privacy feature in modern mobile operating systems (iOS 14+, Android 10+) where the device broadcasts a temporary, randomised MAC address when probing for networks, rather than its true hardware address.

Forces IT teams to rely on authenticated sessions rather than passive probe data for any longitudinal customer tracking. Makes unauthenticated repeat-visit measurement unreliable.

Captive Portal

A web page presented to users before network access is granted, used for authentication, data collection, and obtaining marketing consent.

The primary mechanism for resolving anonymous device MAC addresses to verified user profiles. Also the legal touchpoint for GDPR consent collection in WiFi analytics deployments.

Passpoint (Hotspot 2.0)

An industry standard (IEEE 802.11u) enabling seamless, automatic, WPA3 Enterprise-encrypted WiFi authentication without manual captive portal interaction, analogous to cellular network roaming.

Essential for delivering a frictionless connection experience in hospitality and large public venues. Enables persistent identity resolution for authenticated analytics without user friction.

Trilateration

The mathematical process of determining a device's physical location by measuring its distance from three or more access points based on RSSI (Received Signal Strength Indicator) readings.

The underlying principle of WiFi location analytics. Dictates AP placement requirements — a minimum of three APs with overlapping coverage are required for any given zone to achieve reliable location data.

Presence Analytics

The detection and counting of devices within the general vicinity of a venue, regardless of whether they have authenticated or connected to the network.

Provides aggregate footfall and passerby metrics. Useful for calculating venue capture rates (ratio of passersby who enter) but insufficient for individual CX personalisation.

Location Analytics

The tracking of a device's specific movement, position, and dwell time within defined zones of a venue, derived from trilateration across multiple access points.

Enables granular CX insights including heatmapping, journey path analysis, and zone conversion rates. Requires higher AP density and more precise infrastructure planning than presence analytics alone.

RSSI (Received Signal Strength Indicator)

A measurement of the power level of a received radio signal, expressed in decibels relative to one milliwatt (dBm). Used by WiFi analytics engines to estimate device distance from each access point.

The raw input for trilateration calculations. RSSI-based location is subject to interference from structural elements, RF reflections, and device orientation — factors that must be accounted for during site surveys.

Case Studies

A 200-room luxury hotel wants to improve VIP guest recognition upon arrival. Front desk staff frequently fail to identify high-tier loyalty members before they present their credentials, resulting in missed personalisation opportunities and guest dissatisfaction.

Deploy a profile-based authentication system using Passpoint (IEEE 802.11u) integrated with the hotel's CRM. Configure perimeter APs in the hotel entrance and car park to detect and authenticate returning guests' devices automatically as they approach the building. When a loyalty tier 1 or tier 2 member's device connects, the analytics engine fires a webhook to the front desk operational dashboard, surfacing the guest's profile — name, stay history, preferences, outstanding requests — before any verbal interaction occurs. The concierge is alerted with a 90-second lead time, enabling a personalised greeting by name and a proactive offer of the guest's preferred room type or upgrade.

Implementation Notes: This approach shifts the burden of identification from the guest to the infrastructure, eliminating the awkward moment where a VIP must announce their own status. The critical architectural requirements are: (1) Passpoint credentials provisioned to loyalty members' devices at enrolment, (2) low-latency webhook integration between the analytics platform and the front desk system, and (3) perimeter AP placement that provides reliable detection before the guest reaches the lobby. An alternative approach using captive portal logins is less effective for VIPs, who find manual logins tedious — the frictionless automatic connection is the differentiator.

A regional shopping centre with 80 retail units wants to measure the effectiveness of a new store layout designed to draw customers into a previously underperforming electronics department located at the rear of the building.

Before implementing the layout change, establish baseline metrics using the WiFi analytics platform: define specific zones for 'Entrance', 'Main Concourse', 'Electronics', and 'Food Court'. Record the zone conversion rate (percentage of total venue visitors who enter the electronics zone), average dwell time in the electronics zone, and the sequential journey path most commonly taken from entrance to electronics. Implement the new layout — revised signage, anchor tenant repositioning, promotional display placement — and monitor the same metrics over a 30-day post-change period. Use cohort analysis to compare the behaviour of first-time visitors versus repeat visitors, as repeat visitors may retain prior navigation habits for several weeks.

Implementation Notes: This scenario demonstrates the transition from intuitive decision-making to empirical, data-driven CX management. The critical factor is establishing a statistically valid baseline before the change — without this, any post-change improvement cannot be confidently attributed to the layout rather than seasonal variation or external factors. The cohort analysis recommendation is important: repeat visitors who know the old layout will take longer to adopt new navigation patterns, which can suppress the apparent impact of the change in the first two to three weeks of measurement.

Scenario Analysis

Q1. A stadium IT director wants to use WiFi analytics to monitor crowd density at concession stands during halftime. The venue has high-density APs deployed in the seating bowl but sparse, corridor-only coverage in the concourses. Before relying on zone-level density data from the concourses, what is the primary architectural constraint that must be addressed?

💡 Hint:Consider the minimum requirements for accurate trilateration and the impact of AP placement patterns.

Show Recommended Approach

The primary constraint is insufficient AP density and likely collinear placement in the concourses. To achieve reliable zone-level location analytics at the concession stands, the IT director must deploy additional APs in the concourse areas with staggered, overlapping coverage — ensuring at least three APs have line-of-sight to any given zone. Corridor-only APs deployed in a straight line create the 'hallway effect', making trilateration geometrically impossible and producing unreliable density data. A dedicated RF site survey should be conducted before the deployment to validate placement and confirm zone boundary accuracy.

Q2. A retail chain's marketing team wants to track the repeat visit rate of customers over a 6-month period using passive WiFi probe data from unauthenticated devices. Why is this approach fundamentally unreliable, and what is the recommended alternative?

💡 Hint:Consider the privacy features introduced in modern mobile operating systems from 2020 onwards.

Show Recommended Approach

This approach is unreliable due to MAC randomisation, introduced in iOS 14 and Android 10. Modern devices broadcast a temporary, randomised MAC address when probing for networks, meaning the same physical device may appear as dozens of different identifiers across multiple visits. This makes it impossible to reliably link probe events to a single returning customer over a 6-month period using passive data alone. The recommended alternative is to implement a captive portal or Passpoint-based authentication system, which ties the device to a verified user profile at the point of login. All subsequent visits by that authenticated user can then be accurately attributed to a single identity, enabling reliable repeat visit rate measurement.

Q3. A hospital wants to implement a digital wayfinding service for patients using the existing guest WiFi network. The IT team plans to collect and process real-time location data to guide patients to their appointments. What is the most critical compliance consideration before going live, and what specific technical control mitigates the primary risk?

💡 Hint:Consider the nature of the data being processed, the environment, and the applicable regulatory framework.

Show Recommended Approach

The most critical compliance consideration is obtaining explicit, informed consent under GDPR (and applicable healthcare data regulations such as HIPAA in the US) before processing any patient location data. Location data in a healthcare setting is potentially sensitive — it can reveal information about a patient's health condition based on which department they visit. The specific technical control required is a clearly worded captive portal consent flow that: (1) explicitly describes the location data being collected, (2) states its purpose (wayfinding only), (3) specifies the retention period, and (4) provides an opt-out mechanism. Additionally, the wayfinding location data must be strictly segregated from any clinical or administrative systems to prevent inadvertent linkage with protected health information. Data minimisation — collecting only the location data necessary for wayfinding and deleting it at session end — is the recommended approach.