CNIL (France) - SAN-2023-005

From GDPRhub
Revision as of 08:51, 16 May 2023 by Ls (talk | contribs) (Created page with "{{DPAdecisionBOX |Jurisdiction=France |DPA-BG-Color= |DPAlogo=LogoFR.png |DPA_Abbrevation=CNIL |DPA_With_Country=CNIL (France) |Case_Number_Name=SAN-2023-005 |ECLI= |Original_Source_Name_1=Légifrance |Original_Source_Link_1=https://www.legifrance.gouv.fr/cnil/id/CNILTEXT000047527412?init=true&page=1&query=SAN-2023-005&searchField=ALL&tab_selection=all |Original_Source_Language_1=French |Original_Source_Language__Code_1=FR |Original_Source_Name_2= |Original_Source_Lin...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
CNIL - SAN-2023-005
LogoFR.png
Authority: CNIL (France)
Jurisdiction: France
Relevant Law:
Article 44 décret n° 2019-536 du 29 mai 2019 pris pour l'application de la loi n° 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés
Type: Other
Outcome: n/a
Started:
Decided:
Published:
Fine: n/a
Parties: Clearview AI
National Case Number/Name: SAN-2023-005
European Case Law Identifier: n/a
Appeal: Unknown
Original Language(s): French
Original Source: Légifrance (in FR)
Initial Contributor: n/a

Clearview AI remains out of reach for the French DPA. Without reaction from Clearview after an order to comply and a €20,000,000 fine, the DPA imposed the payment of a €5,200,000 penalty.

English Summary

Facts

This decision is a follow-up on a decision of 17 October 2022 (available on GDPRhub https://gdprhub.eu/index.php?title=CNIL_(France)_-_D%C3%A9lib%C3%A9ration_SAN-2022-019) in which the French DPA (CNIL) had fined Clearview AI €20,000,000 for several GDPR-related violations and ordered it to comply within two months with different measures under a penalty of €100,000 per day.

On 9 February 2023, the CNIL informed the company that without any proof of compliance, it would impose an overdue payment of €5,200,000 for the period between December 2022 (two months after the initial decision) and February 2023.

Holding

On 13 April 2023, the CNIL effectively imposed the payment of the €5,200,000 penalty.

Comment

As a reminder, Clearview's business is to use photographs from websites, including social networks, and to market them for facial recognition. The US-based company has reportedly not paid the first fine and remains silent. It is disappointing to observe Clearview AI remains out of reach. This case shows (once again) the difficulties of enforcing European regulations on foreign companies.

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the French original. Please refer to the French original for more details.