Clearview Al Inc.

€20,000,000

Insufficient fulfilment of data subjects rights

Otsuse kuupäev

17. oktoober 2022

Ametiasutus

French Data Protection Authority (CNIL)

FR

Sektor

Industry and Commerce

Riik

IT

Seadus

GDPR

Staatus

FINAL

Kirjeldus

The French DPA has fined Clearview Al Inc. EUR 20,000,000. The company holds a database of more than 20 billion facial images (including those of french residents and nationals) from around the world. The data is collected online from publicly accessible platforms such as social networks. The company offers a search service that allows individuals to be identified based on the biometric data extracted from the images. Individuals' profiles can be enriched with information associated with those images, such as image tags and geolocation. In the course of its investigation the DPA found that the personal data contained in the company's database had been processed unlawfully and without a valid legal basis. In addition, the DPA found that Clearview AI restricted the exercise of data subjects' rights. For example, it limited the exercise of data subjects' rights to twice a year without justification. Also, data subjects had to submit several requests before one was answered. Moreover, requests were often not answered at all or only inadequately. Finally, the DPA criticized the cooperation of Clearview AI. The company did not respond to investigation forms at all or only very incompletely.

Õiguslikud viited

Art. 6Art. 12Art. 15Art. 17Art. 31

Probleemid ja rikkumised

Insufficient fulfilment of data subjects rights

Privaatsuse jõustamise kohta ajakohastatud teave

Me austame teie privaatsust. Üks e-kiri kuus, ei ole rämpsposti, loobuda tellimusest igal ajal.