3 ms·
> This country desperately needs a GDPR equivalent. Hmmm, I wonder how hard it’d be to lawyer up and force Clearview (and OpenAI?) under GDPR (or CCPA?) to rem
by bigiain 4y ago
> This country desperately needs a GDPR equivalent.
Hmmm, I wonder how hard it’d be to lawyer up and force Clearview (and OpenAI?) under GDPR (or CCPA?) to remove every piece of personally identifying information about me?
Clearview: “We have a 99.7% certainly match for the Zodiac Killer. The name is [deleted as per GDPR request] and the link to their mugshot photo is 410 Gone. Deleted as per GDPR request”
- mindslight 4y agoPictures of your face are most certainly personal information, so with proper deletion (or lack of consent in the first place), there should be nothing to match against.
- bigiain 4y agoGood point. I wonder how low a resolution in facial keypoints you would have to go to have any plausible claim that the data is no longer PII? “We don’t have any PII as covered by the GDPR. We do however have this list of 15 xy coordinates here, that coincidentally happen to match up with the output of a facial keypoints that might be generated if somebody _else_ had a photo of you and ran it through a keypoints extraction algorithm…” I’d probably take a day off to do some justice tourism and visit the courtroom the day a lawyer for Clearview tried to argue “My clients product, which they sell as a method of personally identifying individuals, does not store any personally identifying data for individuals it identifies, your honor.”
- realusername 4y ago> I wonder how low a resolution in facial keypoints you would have to go to have any plausible claim that the data is no longer PII? It doesn't matter how low the matching resolution is, they still need to store the whole image somewhere to show the match and that is 100% personal information