The French data protection authority ('CNIL') announced, on 20 October 2022, that it had issued, on 20 September 2022, the Deliberation of CNIL's Restricted Committee No. SAN-2022-019 of 17 October 2022 ('Deliberation of 17 October 2022'), in which it imposed a fine of €20 million on Clearview AI Inc., for violation of Articles 6, 12, 15, 17, and 31 of the General Data Protection Regulation (Regulation (EU) 2016/679) ('GDPR'), following complaints by individuals and data protection authorities. Background to the decision In particular, CNIL highlighted that it and various other European data protection authorities had received complaints regarding Clearview AI's use of facial recognition sof
News
France: CNIL fines Clearview AI €20 million over facial recognition technology
October 20, 2022
Summary
The French data protection authority, CNIL, fined Clearview AI Inc. €20 million for GDPR violations, including unlawful data processing, failure to facilitate access and erasure rights, and non-cooperation with the authority. Following complaints, CNIL's investigation found Clearview AI did not obtain consent for its facial recognition software, which is used commercially and by US law enforcement. CNIL issued an injunction against processing French data subjects' information, ordered the deletion of collected data, and set a daily penalty for non-compliance. Additionally, CNIL imposed a further €5.2 million fine for Clearview AI's non-compliance with the initial injunction.