<https://www.theverge.com/2020/5/28/21273388/aclu-clearview-ai-lawsuit-facial...> The American Civil Liberties Union is suing controversial facial recognition firm Clearview AI for violation of the Illinois Biometric Information Privacy Act (BIPA), alleging the company illegally collected and stored data on Illinois citizens without their knowledge or consent and then sold access to its technology to law enforcement and private companies. The full complaint is available here. “Unbeknownst to the public, this company has offered up this massive faceprint database to private companies, police, federal agencies, and wealthy individuals, allowing them to secretly track and target whomever they wished using face recognition technology,” writes ACLU attorney Nathan Freed Wessler in a blog post outlining the lawsuit. “That company is Clearview AI, and it will end privacy as we know it if it isn’t stopped.” "“That company is Clearview AI, and it will end privacy as we know it if it isn’t stopped.”" Clearview AI rose to prominence earlier this year thanks to media reports, including a high-profile investigation from The New York Times in January, that revealed its technology is highly accurate and in widespread use throughout both law enforcement agencies and private sector companies. The reason the company’s tool is effective is because Clearview scraped photographs and other data from social media sites against those platforms’ rules, resulting in a database of more than 3 billion images which are then matched against an uploaded photo using sophisticated algorithms trained by machine learning. Tech companies have sent numerous cease and desist orders to Clearview over the past five months, but it’s unclear if the company has ever complied with orders to remove data it’s siphoned from public social networks’ pages and posts. The company has responded to criticism by claiming it would never offer its tool to the public for individual use and more recently said it would stop selling its technology to private companies and focus only on law enforcement. However, numerous media reports have discovered that Clearview provided its product to investors, high-profile executives, and other individuals as part of trial periods to promote the product, and critics fear its facial recognition system is the foundation for rampant civil rights violations. “By building a mass database of billions of faceprints without our knowledge or consent, Clearview has created the nightmare scenario that we’ve long feared, and has crossed the ethical bounds that many companies have refused to even attempt. Neither the United States government nor any American company is known to have ever compiled such a massive trove of biometrics,” Wessler explains. “Adding fuel to the fire, Clearview sells access to a smartphone app that allows its customers — and even those using the app on a trial basis — to upload a photo of an unknown person and instantaneously receive a set of matching photos.” One avenue to combat Clearview’s conduct that may prove effective is BIPA, the Illinois privacy law and one of the only pieces of US legislation that protects facial recognition data from misuse. It’s the same law that earlier this year pushed Facebook to a $550 million settlement over its use of unauthorized facial recognition on photos uploaded to its social network. The ACLU says “Clearview’s actions clearly violate BIPA,” which demands a company inform citizens and gain written consent when any biometric identifier, be it a faceprint or a fingerprint, is collected and stored for any reason. [...]