Australian EnterpriseAI Index
Back to incident database
CriticalOther3 November 2021

Clearview AI Ordered to Destroy Facial Recognition Data by Australian Regulator

Clearview AI

What happened

Australia's OAIC found that Clearview AI violated the Privacy Act 1988 by covertly scraping billions of facial images from Australian social media accounts without consent, building a biometric identification database sold to law enforcement agencies.

Root cause

Facial recognition model trained on mass-scraped public data without consent mechanisms, privacy impact assessment, or lawful basis for processing sensitive biometric data.

Architectural failure

No privacy-by-design controls in data collection pipeline; no consent management or data minimisation; training data governance framework entirely absent for sensitive biometric categories.

Outcome

OAIC ordered Clearview AI to cease collecting facial images of Australians and destroy all existing images. Similar enforcement actions taken by UK ICO, French CNIL, and Italian Garante.

Architectural Failure Patterns

These pattern categories on aipatterns.com.au describe the systemic failure modes this incident exhibited.

Cite this incident

https://corporateai.com.au/incidents/clearview-ai-oaic-2021

Quick facts

Date
3 November 2021
Organisation
Clearview AI
Sector
Other
Severity
Critical
Regulatory bodies
Privacy Act 1988 (Australia)GDPRBiometric Information Privacy Act (BIPA)UK Data Protection Act 2018
Tags
facial-recognitionbiometricsprivacydata-scrapingconsentenforcement

Explore failure patterns

aipatterns.com.au