Topics

Latest

AI

Amazon

Article image

Image Credits:Sean Zanni/Patrick McMullan(opens in a new window)/ Getty Images

Apps

Biotech & Health

mood

Hoan Ton-That speaks at Clearview AI Lawyer Appreciation Day Reception

Image Credits:Sean Zanni/Patrick McMullan(opens in a new window)/ Getty Images

Cloud Computing

Commerce

Crypto

Enterprise

EVs

Fintech

Fundraising

Gadgets

Gaming

Google

Government & Policy

Hardware

Instagram

layoff

Media & Entertainment

Meta

Microsoft

Privacy

Robotics

Security

Social

Space

inauguration

TikTok

Transportation

Venture

More from TechCrunch

Events

Startup Battlefield

StrictlyVC

Podcasts

video

Partner Content

TechCrunch Brand Studio

Crunchboard

get through Us

Clearview AI , the controversial U.S.-based facial recognition startup that ramp up a searchable database of 30 billion figure populate by scraping the net for people ’s selfies without their consent , has been impinge on with its large privacy fine yet in Europe .

The Netherlands ’ datum protection authority , Autoriteit Persoonsgegevens ( AP ) , said on Tuesday that it has imposed a penalty of € 30.5 million — around $ 33.7 million at current exchange rates — on Clearview AI for a raft of breaches of the European Union ’s General Data Protection Regulation ( GDPR ) after confirming the database contains images of Dutch citizen .

This mulct is large than separateGDPR sanctionsimposed by information protection authorization inFrance , Italy , Greeceand theU.K.back in 2022 .

In apress press release , the AP warned it has ordered an additional penalisation of up to € 5.1 million that will be impose for continued non - conformation , saying Clearview fail to stop the GDPR violations after the investigation concluded , which is why it has made the extra edict . The entire fine could hit € 35.6 million if Clearview AI keeps ignoring the Netherlands governor .

The Dutch information protection authority start look into Clearview AI in March 2023 after it received complaints from three individuals related to the society ’s nonstarter to comply with data admittance postulation . The GDPR gives EU house physician a set of right colligate to their personal data point , which admit the right to bespeak a copy of their data or have it erase . Clearview AI has not been complying with such petition .

Other GDPR violations the AP is sanctioning Clearview AI for admit the salient one of building a database by collecting multitude ’s biometric data without a valid legal base . It is also being O.K. for GDPR transparentness weakness .

“ Clearview should never have build the database with pic , the unequaled biometric computer code and other entropy linked to them , ” the AP write . “ This especially applies for the [ face - derived singular biometric ] codes . Like fingerprint , these are   biometric information . Collecting and using them is nix . There are some statutory exception to this prohibition , but Clearview can not rely on them . ”

Join us at TechCrunch Sessions: AI

Exhibit at TechCrunch Sessions: AI

The troupe also failed to inform the individuals whose personal data it scratch and contribute to its database , per the decision .

Reached for comment , Clearview illustration Lisa Linden of the Washington , D.C.-based praseodymium house Resilere Partners did not respond to questions but netmail TechCrunch a statement that ’s attributed to Clearview ’s chief legal officer , Jack Mulcaire .

“ Clearview AI does not have a place of business in the Netherlands or the EU , it does not have any client in the Netherlands or the EU , and does not contract any activities that would otherwise intend it is open to the GDPR , ” Mulcaire wrote , add up : “ This decision is unlawful , devoid of due process and is unenforceable . ”

According to the Dutch regulator , the fellowship can not appeal the penalization as it failed to object to the decision .

It ’s also worth noting that the GDPR is extraterritorial in scope , meaning it applies to the processing of personal data of EU people wherever that processing takes place .

U.S.-based Clearview uses people ’s scraped data to trade an identity - pit serve to customers that can admit government bureau , law enforcement and other certificate service . However , its clients are increasingly unlikely to hail from the EU , where use of the privacy law - breaking tech risks regulatory imprimatur — something which happened toa Swedish law authority back in 2021 .

The AP warned that it will strictly sanction any Dutch entities that search to use Clearview AI . “ Clearview give away the law of nature , and this realize using the services of Clearview illegal . Dutch organisations that employ Clearview may therefore expect hefty fines from the Dutch DPA , ” wrote Dutch DPA chairman , Aleid Wolfsen .

An English language version of the AP ’s decision can be accessed via thislink .

Personal liability?

Clearview AI has faced a sight of GDPR penalty over the past several year ( on newspaper , it has pile up a sum of about € 100 million in EU privateness fine ) , but regional data security authorities apparently have n’t been very successful at pile up any of these mulct . The U.S.-based caller remains uncooperative and has not appointed a legal interpreter in the EU .

More importantly , Clearview AI has not changed its GDPR - violating behavior — it has go forward to scoff European privateness laws with apparent in operation impunity on write up of being based elsewhere .

The Dutch AP is implicated about this , saying it is explore ways to ensure Clearview stops breaking the law . The regulator is look into whether the company ’s directors can be held personally responsible for the violation .

“ Such a troupe can not continue to go against the rights of Europeans and get aside with it . sure not in this serious manner and on this massive plate . We are now rifle to investigate if we can carry the management of the company personally liable and ticket them for directing those usurpation , ” write Wolfsen . “ That indebtedness already exists if managing director get it on that the GDPR is being violated , have the authority to block that , but omit to do so , and in this direction consciously live with those irreverence . ”

Since we ’ve just seenthe beginner of messaging app Telegram , Pavel Durov , arrested on Gallic soilover allegation of illegal message being spread on his weapons platform , it ’s interesting to view whether sanctioning the people deal Clearview might have a greater probability of drive compliance — they may care to travel freely to and around the EU , after all .