otherConcludedSEK 2,500,000
Swedish Authority for Privacy Protection (IMY) — Swedish Police Authority
February 11, 2021 · Sweden · Law Enforcement
IMY imposed an administrative fine on the Swedish Police Authority for unlawfully processing biometric data for facial recognition using Clearview AI, failing to conduct a data protection impact assessment. The Police were also ordered to inform data subjects and ensure data erasure.
Key takeaway — how to prevent this
Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.