CNIL (France) - SAN-2023-005: Difference between revisions

From GDPRhub
(Created page with "{{DPAdecisionBOX |Jurisdiction=France |DPA-BG-Color= |DPAlogo=LogoFR.png |DPA_Abbrevation=CNIL |DPA_With_Country=CNIL (France) |Case_Number_Name=SAN-2023-005 |ECLI= |Original_Source_Name_1=Légifrance |Original_Source_Link_1=https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047527412?init=true&page=1&query=SAN-2023-005&searchField=ALL&tab_selection=all |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Lin...")
 
No edit summary
 
(One intermediate revision by the same user not shown)
Line 61: Line 61:
}}
}}


Clearview AI remains out of reach for the French DPA. Without reaction from Clearview after an order to comply and a €20,000,000 fine, the DPA imposed the payment of a €5,200,000 penalty.
Since Clearview did not comply with a previous order to comply issued together with a €20,000,000 fine, the French DPA imposed the payment of a €5,200,000 penalty.


== English Summary ==
== English Summary ==


=== Facts ===
=== Facts ===
This decision is a follow-up on a decision of 17 October 2022 (available on GDPRhub https://gdprhub.eu/index.php?title=CNIL_(France)_-_D%C3%A9lib%C3%A9ration_SAN-2022-019) in which the French DPA (CNIL) had fined Clearview AI €20,000,000 for several GDPR-related violations and ordered it to comply within two months with different measures under a penalty of €100,000 per day.  
This decision is a follow-up on a decision of 17 October 2022 (available [[CNIL (France) - Délibération SAN-2022-019|on GDPRhub]]) in which the French DPA (CNIL) had fined Clearview AI €20,000,000 for several GDPR-related violations and ordered it to comply within two months with different measures under a penalty of €100,000 per day.  


On 9 February 2023, the CNIL informed the company that without any proof of compliance, it would impose an overdue payment of €5,200,000 for the period between December 2022 (two months after the initial decision) and February 2023.
On 9 February 2023, the CNIL informed the company that without any proof of compliance, it would impose an overdue payment of €5,200,000 for the period between December 2022 (two months after the initial decision) and February 2023.


=== Holding ===
=== Holding ===
On 13 April 2023, the CNIL effectively imposed the payment of the €5,200,000 penalty.
Without reaction from Clearview, on 13 April 2023, the CNIL effectively imposed the payment of the €5,200,000 penalty.


== Comment ==
== Comment ==
As a reminder, Clearview's business is to use photographs from websites, including social networks, and to market them for facial recognition. The US-based company has reportedly not paid the first fine and remains silent. It is disappointing to observe Clearview AI remains out of reach. This case shows (once again) the difficulties of enforcing European regulations on foreign companies.
As a reminder, Clearview's business is to use photographs from websites, including social networks, and to market them for facial recognition. The US-based company has reportedly not paid the first fine and remains silent. It is disappointing to observe Clearview AI, even though it is established that it violates EU citizen's right to data protection, remains out of reach. The company denies the application of the GDPR to its activities.
 
This case shows (once again) the difficulties of enforcing European regulations on foreign companies. It will be interesting to follow the next steps the CNIL is going to take in that matter.  


== Further Resources ==
== Further Resources ==

Latest revision as of 11:44, 16 May 2023

CNIL - SAN-2023-005
LogoFR.png
Authority: CNIL (France)
Jurisdiction: France
Relevant Law:
Article 44 décret n° 2019-536 du 29 mai 2019 pris pour l'application de la loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés
Type: Other
Outcome: n/a
Started:
Decided:
Published:
Fine: n/a
Parties: Clearview AI
National Case Number/Name: SAN-2023-005
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): French
Original Source: Légifrance (in FR)
Initial Contributor: n/a

Since Clearview did not comply with a previous order to comply issued together with a €20,000,000 fine, the French DPA imposed the payment of a €5,200,000 penalty.

English Summary

Facts

This decision is a follow-up on a decision of 17 October 2022 (available on GDPRhub) in which the French DPA (CNIL) had fined Clearview AI €20,000,000 for several GDPR-related violations and ordered it to comply within two months with different measures under a penalty of €100,000 per day.

On 9 February 2023, the CNIL informed the company that without any proof of compliance, it would impose an overdue payment of €5,200,000 for the period between December 2022 (two months after the initial decision) and February 2023.

Holding

Without reaction from Clearview, on 13 April 2023, the CNIL effectively imposed the payment of the €5,200,000 penalty.

Comment

As a reminder, Clearview's business is to use photographs from websites, including social networks, and to market them for facial recognition. The US-based company has reportedly not paid the first fine and remains silent. It is disappointing to observe Clearview AI, even though it is established that it violates EU citizen's right to data protection, remains out of reach. The company denies the application of the GDPR to its activities.

This case shows (once again) the difficulties of enforcing European regulations on foreign companies. It will be interesting to follow the next steps the CNIL is going to take in that matter.

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the French original. Please refer to the French original for more details.