Google Photos Is Scanning Your Face Without Meaningful Consent
Facial recognition in Google Photos raises biometric privacy concerns as state laws struggle to keep pace
Google Photos' face grouping feature automatically identifies and clusters photos of the same person using facial recognition technology. The feature is remarkably accurate and undeniably convenient, enabling users to search their entire photo library by typing a person's name. But the biometric data powering this convenience — unique facial geometry measurements that function as a digital fingerprint — is collected and processed with minimal meaningful consent, raising serious concerns under emerging biometric privacy laws.
The legal landscape around facial recognition and biometric data has shifted significantly. Illinois' Biometric Information Privacy Act (BIPA), enacted in 2008, requires companies to obtain informed written consent before collecting biometric identifiers and provides for statutory damages of $1,000 to $5,000 per violation. Google has faced multiple lawsuits under BIPA related to Google Photos' facial recognition features.
Key Takeaways
- Google paid $100 million to settle a BIPA lawsuit over Google Photos facial recognition in Illinois
- Google Photos scans every face in every uploaded photo, creating biometric profiles of people who never consented
- Face grouping is enabled by default in most jurisdictions, with most users unaware of the biometric data implications