Every store measures its own traffic, but nobody measures the flow of the whole mall: which floors get abandoned first, which anchor stores pull traffic to nearby ones, and what route the average visitor actually takes.
Start with your current cameras. No facial recognition. GDPR from day one.