Enforcement · French Data Protection Authority (CNIL) EN LLM context

Clearview Al Inc.: Insufficient fulfilment of data subjects rights

The French DPA has fined Clearview Al Inc.

€20,000,000 Fine

Clearview Al Inc.

FRANCE

Art. 6 GDPR Art. 12 GDPR Art. 15 GDPR Art. 17 GDPR Art. 31 GDPR

Personal Data Types of Special Categories of Personal Data Supervisory Authorities Biometric Data

Oct 17, 2022 Source legifrance.gouv.fr

Full text 2 findings

Paragraphs carrying a topic or an applied provision show those connections inline

The French DPA has fined Clearview Al Inc. EUR 20,000,000. The company holds a database of more than 20 billion facial images (including those of french residents and nationals) from around the world. The data is collected online from publicly accessible platforms such as social networks. The company offers a search service that allows individuals to be identified based on the biometric data extracted from the images. Individuals' profiles can be enriched with information associated with those images, such as image tags and geolocation. In the course of its investigation the DPA found that the personal data contained in the company's database had been processed unlawfully and without a valid legal basis. In addition, the DPA found that Clearview AI restricted the exercise of data subjects' rights. For example, it limited the exercise of data subjects' rights to twice a year without justification.

Personal Data Biometric Data Types of Special Categories of Personal Data

Also, data subjects had to submit several requests before one was answered. Moreover, requests were often not answered at all or only inadequately. Finally, the DPA criticized the cooperation of Clearview AI. The company did not respond to investigation forms at all or only very incompletely. GDPR Articles: Art. 6 GDPR, Art. 12 GDPR, Art. 15 GDPR, Art. 17 GDPR, Art. 31 GDPR Industry: Industry and Commerce

Supervisory Authorities applies Art. 6 Art. 12 Art. 15 Art. 17

How it connects

2 of 2 paragraphs apply legislation or carry a topic — see them in the full text ↓

References

Related across sources

C-169/23 Nemzeti Adatvédelmi és Információszabadság Hatóság v UC In Case C-169/23, the Court of Justice of the European Union (Third Chamber) ruled on a preliminary reference from the Kúria (Hungary) concerning whether the Budapest Metropolitan… CJEU ·Third Chamber Nov 28, 2024 Personal Data Legitimate Interest Supervision

C-60/22 UZ v Bundesrepublik Deutschland In Case C-60/22, the CJEU (Fifth Chamber) ruled on a preliminary reference from the Verwaltungsgericht Wiesbaden concerning UZ, a third-country national, and the Bundesrepublik… CJEU ·Fifth Chamber May 4, 2023 Right to Restriction Right to be Forgotten Personal Data

C-634/21 OQ v Land Hessen In Case C-634/21, the CJEU addressed a preliminary ruling from the Verwaltungsgericht Wiesbaden concerning OQ's challenge against Land Hessen's refusal to order SCHUFA Holding AG… CJEU ·First Chamber Dec 7, 2023 Profiling Automated Decision-Making Marketing

C-252/21 Meta Platforms v noyb C-252/21 (Meta Platforms (noyb)) CJEU Jan 12, 2023 Supervisory Authorities IP Address Supervision

Guidelines 05/2022 use of facial recognition technology in the area of law enforcement Guidelines ·EDPB May 17, 2023 Biometric Data Supervision Identification

Opinion 11/2024 use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR) A dopted Opinion 11/2024 on the use of facial recognition to streamline airport passengers’ flow (compatibility with Articles 5(1)(e) and(f), 25 and 32 GDPR Version 1.1 Adopted on… Opinion ·EDPB May 24, 2024 Biometric Data Identification Retention Period