Description

Ruling in data protection investigation into Clearview AI

On 13 July 2022, the Hellenic Data Protection Authority (DPA) fined the company Clearview AI after pursuing an investigation into its personal data collection practices. Clearview AI was fined EUR 20 million for violating the EU General Data Protection Regulation (GDPR) by processing individuals' biometric and geolocation data without explicit consent and for failing to provide access to the data its stores after requests. Furthermore, the company was found in violation of the principles of legality and transparency regarding data collection. In addition, in its ruling, the DPA prohibited the company from collecting and processing personal data of individuals in Greece using facial recognition and ordered it to erase the collected data relating to individuals located in Greece.

Original source

Scope

Policy Area
Data governance
Policy Instrument
Data protection regulation
Regulated Economic Activity
ML and AI development
Implementation Level
national
Government Branch
executive
Government Body
data protection authority

Complete timeline of this policy change

Hide details
2021-07-16
under deliberation

On 16 July 2021, the Greek Data Protection Authority opened an investigation into ClearviewAI's per…

2022-07-13
in force

On 13 July 2022, the Hellenic Data Protection Authority (DPA) fined the company Clearview AI after …