ARTICLE
21 January 2021

Defunct Photo App Agrees To Erase Biometric Data In FTC Settlement

SM
Sheppard Mullin Richter & Hampton

Contributor

Sheppard Mullin is a full service Global 100 firm with over 1,000 attorneys in 16 offices located in the United States, Europe and Asia. Since 1927, companies have turned to Sheppard Mullin to handle corporate and technology matters, high stakes litigation and complex financial transactions. In the US, the firm’s clients include more than half of the Fortune 100.
The Federal Trade Commission recently entered the biometric fray. It settled with a now-defunct photo-storage app over its use of facial recognition technology.
United States Technology
To print this article, all you need is to be registered or login on Mondaq.com.

The Federal Trade Commission recently entered the biometric fray. It settled with a now-defunct photo-storage app over its use of facial recognition technology. According to the FTC, the company engaged in a variety of deceptive and unfair acts, in violation of Section 5 of the FTC Act.

The company, Everalbum, Inc. operated an app that let users organize photos that they uploaded to the app. The app, Ever, had a "Friends" tool that used facial recognition technology to group photos by people's faces. Everalbum told users it would only use facial recognition with consent. However, Friends was in an "opt in" mode only in jurisdictions with biometric laws (Texas, Illinois, Washington, and the European Union). For users in other locations, the technology was automatically turned on unless users opted out. This (being in opt-out mode) did not constitute the promised consent, according to the FTC.

Also of concern for the FTC was the fact that facial recognition technology was used by extracting images from uploaded photos and combining those with other images the company obtained from public datasets. The resulting datasets Everalbum created, the FTC alleged, were used to help develop Friends. The FTC was further concerned that Everalbum did not delete any users' photos upon account deactivation, even though it represented that it would do so. Instead, Ever stored photos indefinitely.

While no civil penalties were imposed, Everalbum agreed to (1) delete all photos collected from users who deactivated their accounts and (2) delete "face embeddings" (i.e., the facial features used for facial recognition) unless the company had obtained express consent for their use. The settlement also establishes recordkeeping requirements. Everalbum also has to complete a compliance report in one year. In a supporting statement, Commissioner Chopra emphasized that absent more restrictions on the use of biometric technology, it was "critical that the FTC meaningfully enforce existing law to deprive wrongdoers of technologies they build through unlawful collection of American's facial images and likenesses."

Originally Published by Sheppard Mullin, January 2021

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

See More Popular Content From

Mondaq uses cookies on this website. By using our website you agree to our use of cookies as set out in our Privacy Policy.

Learn More