Citing “alleged serious breaches” of data protection laws, UK's ICO notifies Clearview AI of its provisional intention to fine the company £17M+
Controversial facial recognition company Clearview AI is facing a potential fine in the UK. Source: ICO .
TechCrunchNatasha Lomas
Context & Ripple Effects
The notice follows a joint UK-Australia investigation into Clearview AI and findings that its database was built through indiscriminate web scraping at very large scale. It matters because the ICO is moving that investigation from inquiry toward a concrete enforcement action.
Later coverage shows the provisional case resulted in a smaller UK fine and deletion order, making this notice the point at which Clearview’s UK data practices became an immediate compliance and business-risk issue.
First-order effects
Clearview AI faces a proposed penalty of more than £17 million and must defend the legality of the data collection practices identified by the ICO.
The ICO puts Clearview’s UK-held facial-data operations under direct enforcement pressure, rather than merely investigative scrutiny.
Second-order effects
The UK-Australia investigation gives other privacy regulators a documented enforcement model for assessing facial-recognition databases assembled from publicly available online material.
Clearview’s public-sector sales effort faces added procurement friction as prospective customers weigh exposure to a supplier under active privacy enforcement.
Third-order effects
Facial-recognition providers increasingly face governance based not only on how systems are used, but on whether the underlying biometric data was lawfully obtained and retained.
If regulators sustain this approach, cross-border privacy enforcement can constrain biometric-data business models even when companies target customers outside the enforcing jurisdiction.
The trend: Biometric AI oversight is shifting toward enforcement of the data-sourcing and retention practices that make large facial-recognition systems possible.
Fun fact: every single known ICO GDPR provisional penalty has been reduced between the NOI and final decision. Doorstep: 400k to 275k BA: 183m to 20m Marriott: 99m to 18m Ticketmaster: 1.5m to 1.25m (Provisional penalties weren't disclosed in the Mermaids or HIV Scotland MPNs) ht…
6/ We argued that Clearview AI's collection of faces violates UK and EU privacy laws. Today, the UK data regulator agreed - and asked the company to stop collecting and delete the faces of people in the UK. Plus, they slapped it with a provisional fine of £17 million.
UK data regulator sets out its intention to fine Clearview AI 17 mill quid as well as order the US facial recognition company to delete Brits data and halt all processing of that data. https://ico.org.uk/...
Clearview AI told by UK regulator to stop processing data as it weighs a possible £17M fine. But tumult at the regulator suggests the final outcome might not be so simple. https://techcrunch.com/...
For context, Clearview AI announced a $30m round of funding in Oct. If this provisional fine doesn't change, it will amount to more than 75% of that fundraise.
The ICO “understands that the service provided by Clearview AI Inc was used on a free trial basis by a number of UK law enforcement agencies”. @BuzzFeedNews reported on data showing 9 UK agencies (incl. Met Police and Nat Crime Agency) tried Clearview: https://www.buzzfeednews.co…
The UK's independent data privacy commissioner announces a provisional fine of £17 million ($22.6 million) for Clearview AI for failing to “to comply with UK data protection laws”. I believe this is the largest fine against the company to date. https://ico.org.uk/...