Clearview AI Inc.
Non-compliance with general data processing principles
Ημερομηνία απόφασης
16 Μαΐου 2024
Αρχή
Dutch Supervisory Authority for Data Protection (AP)
NL
Τομέας
Industry and Commerce
Χώρα
DE
Νόμος
GDPRΚατάσταση
FINALΠεριγραφή
The Dutch DPA has fined Clearview Al Inc. EUR 30,500,000. Clearview, a company offering facial recognition services, holds a database of over 30 billion images, including those of Dutch citizens. These images are scraped from publicly available online platforms, such as social media. Clearview uses these images to create biometric profiles, allowing individuals to be identified. During its investigation the DPA found that the personal data contained in the company's database had been processed unlawfully and without a valid legal basis. Furthermore the company violated the principle of transparency by failing to adequately inform data subjects about the processing of their data. Additionally, the company did not respond to two access requests from data subjects. The company also failed to facilitate the right of access of data subjects located within the territory of the Netherlands. Lastly, the company had not appointed a representative within the European Union as required under the GDPR.