Incident 254: Google’s Face Grouping Allegedly Collected and Analyzed Users’ Facial Structure without Consent, Violated BIPA

Description: A class-action lawsuit alleged Google failing to provide notice, obtain informed written consent, or publish data retention policies about the collection, storage, and analysis of its face-grouping feature in Google Photos, which violated Illinois Biometric Information Privacy Act (BIPA).

Tools

New ReportNew ReportNew ResponseNew ResponseDiscoverDiscoverView HistoryView History

Entities

View all entities
Alleged: Google developed and deployed an AI system, which harmed Google Photos users residing in Illinois , Google Photos users and Illinois residents.

Incident Stats

Incident ID
254
Report Count
2
Incident Date
2015-05-01
Editors
Khoa Lam
Applied Taxonomies
GMF, CSETv1, MIT

CSETv1 Taxonomy Classifications

Taxonomy Details

Incident Number

254

GMF Taxonomy Classifications

Taxonomy Details

Known AI Goal Snippets

(Snippet Text: The complaint alleges Google’s face grouping tool, which automatically identifies your face in photos and videos uploaded to Photos, violates Illinois’ Biometric Information Privacy Act (BIPA)., Related Classifications: Data Grouping)

MIT Taxonomy Classifications

Machine-Classified
Taxonomy Details

Risk Subdomain

2.1. Compromise of privacy by obtaining, leaking or correctly inferring sensitive information

Risk Domain

  1. Privacy & Security

Entity

AI

Timing

Post-deployment

Intent

Unintentional

Google to pay $100 million to Illinois residents for Photos’ face grouping feature
theverge.com · 2022

Google has agreed to pay $100 million to Illinois residents to settle a class-action lawsuit over one of its facial recognition features in Google Photos (via Gizmodo). The complaint alleges Google’s face grouping tool, which automatically …

Saturday is the last day for Illinois residents to claim a cut of $100 million Google Photos privacy settlement
chicagotribune.com · 2022

Illinois residents have until Saturday to submit claims for their cut of a $100 million class-action settlement reached this spring in a lawsuit against Google over alleged violations of the state’s biometric privacy law.

Anyone who appeare…

Variants

A "variant" is an incident that shares the same causative factors, produces similar harms, and involves the same intelligent systems as a known AI incident. Rather than index variants as entirely separate incidents, we list variations of incidents under the first similar incident submitted to the database. Unlike other submission types to the incident database, variants are not required to have reporting in evidence external to the Incident Database. Learn more from the research paper.
Previous IncidentNext Incident