Enforcement · French Data Protection Authority (CNIL) EN LLM context A cited markdown file you can paste into your AI assistant (ChatGPT, Claude, a RAG or project knowledge base) to ground it in this document. Contains: this document’s text, its sections with their topics, and the full text of every law provision it applies. Everything links back to its source on overview.legal — legal information, not advice.

Clearview Al Inc.: Insufficient fulfilment of data subjects rights

€20,000,000 Fine
Clearview Al Inc.
FRANCE
Art. 6 GDPR Art. 12 GDPR Art. 15 GDPR Art. 17 GDPR Art. 31 GDPR
Personal Data Biometric Data Biometric Data Special Categories of Data Types of Special Categories of Personal Data Processing Agreement Supervisory Authorities
Oct 17, 2022 Source

How it connects

Related across sources

Guidance Guidelines 05/2022 on the use of facial recognition technology in the area of law enforcement EDPB News De Griekse toezichthouder heeft Clearview AI een boete van 20 miljoen euro opgelegd. IAPP News Greek SA fines Clearview AI for EUR 20M IAPP News ICO Publishes Draft Employee Monitoring Guidance for Consultation Hunton Andrews Kurth News De ICO publiceert een conceptrichtlijn over het monitoren van werknemers ter beoordeling. Hunton Andrews Kurth News De Autoriteit Persoonsgegevens publiceert een rapport over de risicoanalyse van de AVG (Algemene Verordening Gegevensbescherming). AEPD

Full text

The French DPA has fined Clearview Al Inc. EUR 20,000,000. The company holds a database of more than 20 billion facial images (including those of french residents and nationals) from around the world. The data is collected online from publicly accessible platforms such as social networks. The company offers a search service that allows individuals to be identified based on the biometric data extracted from the images. Individuals' profiles can be enriched with information associated with those images, such as image tags and geolocation. In the course of its investigation the DPA found that the personal data contained in the company's database had been processed unlawfully and without a valid legal basis. In addition, the DPA found that Clearview AI restricted the exercise of data subjects' rights. For example, it limited the exercise of data subjects' rights to twice a year without justification. Also, data subjects had to submit several requests before one was answered. Moreover, requests were often not answered at all or only inadequately. Finally, the DPA criticized the cooperation of Clearview AI. The company did not respond to investigation forms at all or only very incompletely.

Industry: Industry and Commerce

Original document at the source www.legifrance.gouv.fr

Similar Content