A Collection is a selection of features, articles, comments and opinions on any given theme or topic. It allows you to stay up‑to‑date with what interests you most.
Login here to access your saved articles and followed authors.
We have sent you an email so you can reset your password.
Sorry, we had a problem.
Tags related to this article
Published 26 mayo 2022
On 23 May 2022, the UK’s Information Commissioner (the “ICO”) confirmed that it had concluded its investigation into the facial recognition company, Clearview AI Inc (“Clearview AI”). The ICO began its investigation in 2020 together with the Office of the Australian Information Commissioner (the “OAIC”). Following similar decisions from other data protection authorities, the ICO has fined Clearview AI £7,552,800 for using images of people in the UK, that were collected from the internet and social media to create a global online database that could be used for facial recognition. This is one of the largest fines issued under the UK GDPR to date.
The ICO’s final fine is 45% less than the original amount proposed on 29 November 2021, where the ICO issued a provisional £17 million fine. In its provisional notice, it also ordered the company to stop processing the personal data of people in the UK following 'alleged serious breaches of the UK’s data protection laws'.
Clearview AI – Facial recognition
Clearview AI has gained a lot of controversial press since the New York Times exposé in 2021. It is an American facial recognition business which describes itself as the “World’s largest facial network”, and has been used by law enforcement bodies in the US and in the UK to assist with criminal prosecutions. Globally, Clearview AI has stored more than “20 billion faces” which are scraped from Facebook, Instagram and other platforms.
Recent decisions by the EU Data Protection Authorities (“DPA”)
In December 2021, the French DPA (CNIL) ordered Clearview AI "to stop unlawfully collecting and processing the personal data of data subjects on the French territory”.
The Italian DPA (the Garante) went one step further in March 2022 and fined Clearview AI €20 million for the unlawful processing of biometric and geolocation data and ordered Clearview AI to prohibit any collection and processing activities in Italy. Interestingly, Clearview AI has challenged this decision with jurisdictional arguments.
A similar decision is also expected by the Austrian DPA soon.
The ICO’s decision
Alongside the ICO’s monetary penalty notice to Clearview AI for £7,552,800, they have issued an enforcement notice, “ordering the company to stop obtaining and using the personal data of UK residents that is publicly available on the internet, and to delete the data of UK residents from its systems”. The ICO found that Clearview AI Inc breached UK data protection laws by:
The joint investigation was conducted in accordance with the Australian Privacy Act and the UK Data Protection Act 2018.
Next steps and implications
We await the release of the ICO’s Enforcement Notice and Monetary Penalty Notice to understand in further detail the ICO’s reasoning and assessment. The Notices are expected to be published shortly. It will be interesting to understand the ICO’s reasoning behind the 45% reduction in the fine imposed.
Many commentators have suggested that Clearview AI may appeal the fine, with arguments being advanced that Clearview AI is not subject to the ICO’s jurisdiction. We believe the fine will be challenged on jurisdictional grounds. What we do not know is how Clearview AI will evidence this as it is known that its former clients include law enforcement bodies in the UK, including: the Ministry of Defence, the Metropolitan Police, and the National Crime Agency. Although it is alleged that Clearview AI Inc no longer offers its services to UK organisations, the ICO fined the company as it has customers in other countries, so the company is still using personal data of UK residents without their consent globally.
London - Walbrook
+44(0)20 7894 6595
Hans Allnutt, Astrid Hardy
Patrick Hill, Sonali Malhotra
Julian Miller, Clare Hughes-Williams
Patrick Hill, Camilla Elliot
Hans Allnutt, Camilla Elliot
Hans Allnutt, Stuart Hunt
Astrid Hardy, Hans Allnutt
Julian Miller, Tom Evans
Jade Kowalski, Astrid Hardy
Louise Gallagher, Katie Anderson