to delete the personal data of those subjects located in Greece, which the defendant collects and processes using the aforementioned methods. This number doubled from the previous largest fine issued by. Finally, with this Decision, the Authority ordered Clearview AI Inc. On July 13, Greece’s data protection authority, the Hellenic Data Protection Authority, imposed a fine of 20 million euros on U.S.-based company Clearview AI for violating multiple provisions of the EU General Data Protection Regulation.

In addition, the Authority ordered the company to comply so that it satisfies the complainant’s request for access to personal data, while imposing (on the same company) a prohibition on the collection and processing of personal data of subjects located in the Greek territory, using methods included in the facial recognition service. The Hellenic DPA imposed a fine of twenty million euros (20,000,000) οn Clearview AI Inc for violating the principles of lawfulness and transparency. 5 paragraphs 1(a) and (2), 6, 9 GDPR) and its obligations under Articles 12, 14, 15 and 27 of the GDPR.

The Authority found that the company, which markets facial recognition services, violated the principles of lawfulness and transparency (art. PARIS, May 11 (Reuters) - The head of Frances data privacy said on Wednesday she was considering triggering the process of fining U.S. With the complaint at issue it was also requested that the practices of the defendant company be examined on the whole from the point of view of the protection of personal data. The Authority examined a complaint against Clearview AI Inc, lodged by the civil non-profit organization “Homo Digitalis” on behalf of a complainant, who claimed that s/he was not satisfied in relation to the right of access s/he exercised before the aforementioned company. Summary of the Decision Origin of the case: Key words: Web scraping, Images Database, Facial Recognition, Biometric Data, AI systems, Geolocation, Jurisdiction under EU law, Representative in the EU.Decision: Infringement of the GDPR, Administrative fine.Article 17: Representatives of controllers not established in the Union. Article 15: Right of access by the data subject. Article 14: Information to be provided where personal data have not been obtained from the data subject. Article 12: Transparent information, communication and modalities for the exercise of the rights of the data subject. Article 9(1) and 9(2)(e): Processing of special categories of personal data. In its announcement, the French agency CNIL argued that Clearview had violated the GDPR in collecting the data and violated various other data access rights in its processing and storage. Article 6 (1)(a)(b)(c)(d)(e)(f): Lawfulness of processing. Article 5(1)(a) and (2): Principles relating to processing of personal data. Legal Reference: GDPR: Article 3: Territorial scope.Cross-border case or national case: National case.

France clearview gdpr clearview