UK: Clearview's facial recognition subject to European data protection rules

A UK appeals court has upheld a million-pound fine against Clearview AI, a US-based facial recognition company, for its data practices. This decision reinforces the application of European data protection regulations, even within the UK, and highlights the reach of GDPR-like principles in the digital age. The ruling sets a precedent for how companies collecting and using biometric data must adhere to strict privacy standards. The court confirmed the penalty imposed by the UK's data protection authority regarding Clearview AI's mega-scraping activities. Mega-scraping refers to the collection of vast amounts of data from the internet, in this case, images used to train facial recognition models. This ruling underscores the importance of consent and data minimization. This decision directly impacts companies like Clearview AI that operate facial recognition technology and collect data from European citizens. More broadly, it emphasizes the continued influence of European data protection principles and their effect on any company handling personal data. The ruling serves as a warning to other tech companies, reinforcing the need to respect privacy regulations.