Lawsuits filed Tuesday accuse Amazon, Alphabet, and Microsoft of training facial recognition tools with photos of people without consent, violating Illinois law
Steven Musil / CNET :
Context & Ripple Effects
Illinois has been the courtroom for facial recognition fights for years: a judge ruled back in 2016 that the state's Biometric Information Privacy Act governs Facebook's face-matching system (the ruling that made BIPA applicable), and the ACLU sued Clearview AI under it in May after the startup scraped residents' online photos (the Clearview filing). Tuesday's suits escalate that arc by naming the three largest US cloud and AI vendors at once.
The defendants also know what losing costs here: Google settled its own Illinois BIPA case over the Photos face-regrouping tool for $100M in April (the $100M settlement), and Texas' attorney general filed a separate biometric-data suit against Google months later. Meanwhile, Microsoft and Amazon have been publicly lobbying for federal facial recognition rules (their federal regulation push) — positioning that these lawsuits now test.
First-order effects
- Amazon, Alphabet, and Microsoft must defend how they sourced and consented to the photos used in facial recognition training, turning internal dataset practices into litigable evidence in Illinois courts.
- Plaintiffs gain a legal vehicle to force disclosure of whose images trained these tools — scrutiny none of the three vendors has faced jointly until now.
Second-order effects
- With Google's $100M Illinois settlement setting a priced benchmark, all three defendants face pressure to settle rather than trial a statute that accumulates liability per photo.
- Texas' attorney general has already shown state enforcers will pursue biometric-collection claims; suits against bigger, better-capitalized targets invite parallel filings from other attorneys general.
Third-order effects
- If state biometric statutes keep yielding large settlements, consent-based image sourcing hardens into a de facto compliance requirement for AI training nationwide, regardless of whether Congress legislates.
- The defendants' own lobbying for federal rules becomes partly defensive: litigation losses give them a concrete argument for a single preemption-friendly standard over patchwork state liability.
The trend: State biometric privacy laws are emerging as the primary enforcement lever against Big Tech's use of personal photos for AI training, with litigation moving faster than federal legislation.