Facial recognition: 20 million euros penalty against Clearview AI

Following a formal notice which remained unaddressed, the CNIL imposed a penalty of 20 million euros and ordered Clearview AI to stop collecting and using data on individuals in France without a legal basis and to delete the data already collected.

As of May 2020, the Commission nationale de l'informatique et des libertés, CNIL received complaints from individuals about Clearview AI's facial recognition software and opened an investigation. In May 2021, the association Privacy International also warned the CNIL about this practice.

On 26 November 2021, the Chair of the CNIL decided to give Clearview AI formal notice to cease the collection and use of data of persons on French territory in the absence of a legal basis to to facilitate the exercise of individuals' rights and to comply with their requests for erasure.  Clearview AI had two months to comply with the injunctions formulated in the formal notice and to justify them to the CNIL. However, it did not provide any response to this formal notice.

The Chair of the CNIL therefore decided to refer the matter to the restricted committee, which is in charge for issuing sanctions.

The Commission found:

  • Unlawful processing of personal data (breach of article 6 of the GDPR)
  • Individuals' rights not respected (articles 12, 15 and 17 of the GDPR)
  • Lack of cooperation with the CNIL (Article 31 of the RGPD)

On the basis of the information brought to its attention, the restricted committee decided to impose a maximum financial penalty of 20 million euros, according to article 83 of the GDPR.

Regarding the very serious risks to the fundamental rights of the data subjects resulting from the processing carried out by the company, the restricted committee decided to order Clearview AI to stop collecting and processing data of individuals residing in France without a legal basis and to delete the data of these persons that it has already collected, within a period of two months. The restricted committee added to this injunction a penalty of 100,000 euros per day of delay beyond these two months. (edpb.europa.eu/photo: freepik.com)

More information here

Comments

Post a Comment

Popular posts from this blog

The Delivery Delay Clause in Residential Construction Contracts: Consumer Protection in Cyprus and Europe

Image
By Giorgos Kazoleas, LL.M., Lawyer, Managing Partner at Legal Experts Cyprus The purchase or construction of a new residence is one of the most significant financial and personal decisions a consumer can make. Residential construction contracts or agreements for the sale of property under construction are a crucial and defining element of the entire process, as certain terms they may contain can be detrimental to the buyer. One of the most critical aspects is the contractual delivery time of the project and the provision for delay, through the so-called delivery delay clause. The Delivery Delay Clause: Its Role and Legal Nature The delivery delay clause (also known as a penalty clause in the event of default) is a term usually included in the contract that specifies a predetermined compensation amount that the contractor or seller must pay to the buyer for every day, week, or month of delay beyond the agreed delivery date. The purpose of the clause is twofold: -Compensatory: ...
Read more

A holding by purely financial investors in a law firm may be prohibited (CJEU)

Image
The EU Court of Justice ruled in Case C-295/23 (Halmer Rechtsanwaltsgesellschaft) that a holding by purely financial investors in a law firm may be prohibited. Such a prohibition is justified in order to ensure the independence of lawyers.  A Member State may prohibit holdings by purely financial investors in the capital of a law firm. Such a restriction on the freedom of establishment and the free movement of capital is justified by the objective of ensuring that lawyers can exercise their profession independently and in compliance with their professional conduct obligations.  The German law firm Halmer Rechtsanwaltsgesellschaft is challenging before the Higher Bavarian Lawyers’ Court (Germany) a decision of the Munich Bar Association of 9 November 2021 which revoked its registration with the bar association on account of the fact that an Austrian limited liability company acquired shares [1] in it for purely financial purposes. Under the German legislation applicable at the ...
Read more

Alleged bullying of whistle-blowing prison guard - Violation of right to respect for private life (ECtHR)

Image
In its Chamber judgment in the case of Špadijer v. Montenegro (application no. 31549/18) the European Court of Human Rights held, unanimously, that there had been a violation of Article 8 (right to respect for private life) of the European Convention on Human Rights. The case concerned the alleged bullying of a prison guard following her reporting an incident involving male prison guards coming into the women’s prison where she worked and their inappropriate contact with female prisoners, and her attempts to address this with the authorities. The Court found in particular that the manner in which the legal mechanisms had been implemented in the applicant’s case had been inadequate, constituting a violation of the obligation on the State to protect her rights. Facts of the case The applicant, Daliborka Špadijer, is a Montenegrin national who was born in 1978 and lives in Podgorica. In 2013 Ms Špadijer, then head-of-shift prison guard in a women’s prison, reported five colleagues for an ...
Read more

Swiss franc loans and borrowers’ rights in the light of 4 important judgments of the European Court of Justice

Image
By George Kazoleas, Lawyer LL.M. The EU Court of Justice has issued important decisions in recent years on the issue of bank foreign currency loans, essentially in Swiss francs, which has created significant case law useful for defending the interests of borrowers who have been “trapped” by credit institutions in contracts with abusive currency risk clauses resulting in undue overchargings. In summing up this case-law, the European Court of Justice has reached the following main conclusions: 1.The loan agreement must set out in a transparent manner the exact functioning of the foreign currency conversion mechanism and the exchange rate clause so that the consumer can assess the financial consequences of this mechanism. 2.The borrower must be clearly informed by the bank that, by concluding a loan agreement in a foreign currency, he / she is exposed to a certain foreign exchange risk that he / she may find it difficult to cope with in the event of a devaluation of the currency a...
Read more

Obligation of a creditor to check a consumer’s creditworthiness - Credit agreement void and creditor’s entitlement to payment of the agreed interest forfeited

Image
By Giorgos Kazoleas, Lawyer A significant decision was issued by the CJEU [1] interpreting Articles 8 and 23 of Directive 2008/48/EC on consumer credit agreements and repealing Council Directive 87/102/EEC as regards the obligation of credit institutions to assess the creditworthiness of consumers before concluding the credit agreement.  Article 8 of that directive, entitled ‘Obligation to assess the creditworthiness of the consumer’, provides: ‘ 1. Member States shall ensure that, before the conclusion of the credit agreement, the creditor assesses the consumer’s creditworthiness on the basis of sufficient information, where appropriate obtained from the consumer and, where necessary, on the basis of a consultation of the relevant database. Member States whose legislation requires creditors to assess the creditworthiness of consumers on the basis of a consultation of the relevant database may retain this requirement. 2. Member States shall ensure that, if the...
Read more

Employee monitoring: French Data Protection Authority fined Amazon France Logistique €32 million

Image
On 27 December 2023, the French Data Protection Authority (CNIL) fined Amazon France Logistique €32 million for setting up an excessively intrusive system for monitoring employee activity and performance. The company was also fined for video surveillance without information nor sufficient security. Amazon France Logistique   manages the Amazon group's large warehouses in France, where it receives and stores items and then prepares parcels for delivery to customers. As part of its activities, each warehouse employee is given a scanner to document the performance of certain tasks assigned to them in real time (storage or removal of an item from the shelves, putting away or packing, etc.). Each scan carried out by employees results in recording of data, which is stored and used to calculate indicators providing information on the quality, productivity and periods of inactivity of each employee. Following press articles about practices of the company in its warehouses, the CNIL c...
Read more

MiCAR’s enforcement: An innovative crypto-friendly regulatory landscape

Image
 Written by Efi Thoma, Lawyer Does the highly anticipated rise of cryptos in the US under Trump administration align with MiCAR’s (Markets in Crypto-Assets EU Regulation) enforcement in the EU regulatory landscape? Even after the collapse of FTX illustrating the dire need for imposing strong regulations to protect investors in crypto assets, the current crypto regulatory progress in the U.S. is ambiguous and remains stalled. This outcome leads to the exacerbation of the lack of faith in the crypto ecosystem by highlighting the unaccountability of the crypto actors with regard to money laundering, financing of terrorism and other illegal activities. In 2023 the International Organization of Securities Commissions has laid out specific recommendations with the aim of imposing some global ground rules on the crypto and digital assets, given the global transactional activities on the crypto sector and the increasing need for the protection of investors in crypto assets. While the f...
Read more