orderConcluded

CNIL Ministry of the Interior and several municipal services

November 15, 2024 · France · Government

The CNIL issued a formal notice (mise en demeure) to the Ministry of the Interior and several municipal services for the unauthorized use of facial recognition functionalities in video analysis software, ordering corrective measures including compliance commitments and a Data Protection Impact Assessment.

Key takeaway — how to prevent this

Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.

Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.