Sanction RGPD Dutch Supervisory Authority for Data Protection (AP) — Clearview AI Inc. : 30,5 M€ (2024)
- Autorité de contrôle
- Dutch Supervisory Authority for Data Protection (AP)
- Pays
- Pays-Bas
- Entreprise / secteur
- Clearview AI Inc.
- Montant de l'amende
- 30,5 M€
- Date de la décision
- 16 mai 2024
- Fondement juridique
- Art. 5 (1) a), Art. 6 (1), Art. 9 (1), Art. 12 (1), (2), Art. 14 (1), (2), Art. 27 (1)
- Manquement
- Non-respect des principes de traitement
Résumé des faits
The Dutch DPA has fined Clearview Al Inc. EUR 30,500,000. Clearview, a company offering facial recognition services, holds a database of over 30 billion images, including those of Dutch citizens. These images are scraped from publicly available online platforms, such as social media. Clearview uses these images to create biometric profiles, allowing individuals to be identified. During its investigation the DPA found that the personal data contained in the company's database had been processed unlawfully and without a valid legal basis. Furthermore the company violated the principle of transparency by failing to adequately inform data subjects about the processing of their data. Additionally, the company did not respond to two access requests from data subjects. The company also failed to facilitate the right of access of data subjects located within the territory of the Netherlands. Lastly, the company had not appointed a representative within the European Union as required under the GDPR.