Vimeo Sued For Storing Faceprints of People Without Their Consent (sophos.com) 6
The ad-free video platform Vimeo is collecting and storing thousands of people's facial biometrics without their permission or knowledge, according to a complaint filed on September 20 on behalf of potentially thousands of plaintiffs under the Illinois Biometric Information Privacy Act (BIPA). Naked Security reports: The suit takes aim at Vimeo's Magisto application: a short-form video creation platform purchased by Vimeo in April 2019 that uses facial recognition to automatically index the faces of people in videos so they can be face-tagged. BIPA bans collecting and storing biometric data without explicit consent, including "faceprints." The complaint against Vimeo claims that users of Magisto "upload millions of videos and/or photos per day, making videos and photographs a vital part of the Magisto experience."
The complaint against Vimeo claims that users of Magisto "upload millions of videos and/or photos per day, making videos and photographs a vital part of the Magisto experience." The court document points to a Magisto website, "How Does Magisto Video Editor Work?" that touts its "so-called 'artificial intelligence engines' that intuitively analyze and edit video content" using "facial detection and recognition technology." The complaint maintains that unbeknownst to the average consumer, Magisto scans "each and every video and photo uploaded to Magisto for faces" and analyzes "biometric identifiers," including facial geometry, to "create and store a template for each face." That template is later used to "organize and group together videos based upon the particular individuals appearing in the videos" by "comparing the face templates of individuals who appear in newly-edited videos or photos with the facial templates already saved in Magisto's face database." The complaint also asserts that Magisto analyzes and face-matches the biometrics of non-Magisto users who happen to appear in the photos and videos, which is a violation of BIPA.
The suit is looking for $5,000 per class member, along with court fees.
The complaint against Vimeo claims that users of Magisto "upload millions of videos and/or photos per day, making videos and photographs a vital part of the Magisto experience." The court document points to a Magisto website, "How Does Magisto Video Editor Work?" that touts its "so-called 'artificial intelligence engines' that intuitively analyze and edit video content" using "facial detection and recognition technology." The complaint maintains that unbeknownst to the average consumer, Magisto scans "each and every video and photo uploaded to Magisto for faces" and analyzes "biometric identifiers," including facial geometry, to "create and store a template for each face." That template is later used to "organize and group together videos based upon the particular individuals appearing in the videos" by "comparing the face templates of individuals who appear in newly-edited videos or photos with the facial templates already saved in Magisto's face database." The complaint also asserts that Magisto analyzes and face-matches the biometrics of non-Magisto users who happen to appear in the photos and videos, which is a violation of BIPA.
The suit is looking for $5,000 per class member, along with court fees.
Every image has been stored and tagged by them all (Score:2)
Its not just Vimeo - its everyone with images and metadata that is storing everything and anything with the hope to sell it to anyone for any reason on day. Google, Facebook, M$, etc etc. That's the venture capital way: fund and exploit - technology doesn't grow on trees, People are a dime a dozen. It just depends how you look at it: are we citizens or are we shareholders? E Pluribus Duo.
Re: Every image has been stored and tagged by them (Score:1)
I assume the "extras" in these videos have not given consent, which is a provable claim. Vimeo is open about the fact they do face recog; they just didn't get everyone to click the box, only the uploader. No one else is admitting to it in a EULA
Woooosh (Score:2)
You are missing the point.
How can you even enforce this rule without having a full time investigator at every company?
Your face not only is public, there is already lots and lots of data stored of it everywhere.
The fine should have been applied to whoever though of using a face for authentication.
This correct approach would prevent the gov from having to police the unpoliciable (i.e. looking at public data in the wrong way), and might also prevent the proliferation of face id tech since now there are less i
BIPA does not ban photographs (Score:1)
Obligatory IANAL, but I don't think this act applies here. BIPA (http://www.ilga.gov/legislation/publicacts/95/095-0994.htm) defines a "Biometric identifier" as follows:
"Biometric identifier" means a retina or iris scan, fingerprint, voiceprint, or scan of hand or face geometry. Biometric identifiers do not include writing samples, written signatures, photographs, ...
Faceprints are not explicitly part of this. They are approximate representations of faces for tagging, but thi