Clearview AI is back in hot — and expensive — water, with the Dutch Data Protection Authority (DPA) fining the company €30.5 million ($33.6 million) for violating the General Data Protection Regulation (GDPR). The release explains that Clearview created "an illegal database with billions of photos of faces," including Dutch individuals, and has failed to properly inform people that it's using their data. In early 2023, Clearview's CEO claimed the company had 30 billion images. 

Clearview must immediately stop all violations or face up to €5.1 million ($5.6 million) in non-compliance penalties. "Facial recognition is a highly intrusive technology, that you cannot simply unleash on anyone in the world," Dutch DPA chairman Aleid Wolfsen stated. "If there is a photo of you on the Internet — and doesn't that apply to all of us? — then you can end up in the database of Clearview and be tracked." He adds that facial recognition can help with safety but that "competent authorities" who are "subject to strict conditions" should handle it rather than a commercial company. 

The Dutch DPA further states that since Clearview is breaking the law, using it is also illegal. Wolfsen warns that Dutch companies using Clearview could also be subject to "hefty fines." Clearview didn't issue an objection to the Dutch DPA's fine, so it is unable to launch an appeal.

This fine is far from the first time an entity has stood up against Clearview. In 2020, the LAPD banned its use, and the American Civil Liberties Union (ACLU) sued Clearview, with the settlement ending sales of the biometric database to any private companies. Italy and the UK have previously fined Clearview €20 million ($22 million) and £7.55 million ($10 million), respectively, and instructed the company to delete any data of its residents. Earlier this year, the EU also barred Clearview from untargeted face scraping on the internet. 

This article originally appeared on Engadget at https://www.engadget.com/cybersecurity/clearview-faces-a-%E2%82%AC305-million-for-violating-the-gdpr-124549856.html?src=rss