In a digital world where we share photos of our lives daily, a recent landmark court decision in British Columbia has just set a huge legal boundary: just because your photo is online doesn’t mean it’s public property for any company to use.
The British Columbia Court of Appeal recently delivered its judgment in Clearview AI Inc. v. British Columbia (Information and Privacy Commissioner), a case with massive implications for our digital privacy.
What Exactly Did Clearview AI Do?
Clearview AI is a US-based technology company that built a massive search engine for human faces. Using an automated image crawler, the company scraped billions of facial images and metadata from public websites like Facebook, Instagram, and YouTube.
The software did not just store the photos. It analyzed them to create a biometric identifier. This is essentially a digital map of your face. By 2023, their database reportedly held over 30 billion images. Clearview then sold access to this database… mostly to law enforcement. They then allowed police to upload a photo of a person of interest and find everywhere else that face appears online, along with links to the original websites.
Clearview did all of this without the knowledge or consent of the people in the photos. And of course it did not compensate them for the photos either.
Why Was This a Breach of BC Privacy Laws?
Clearview argued that since the photos were publicly available on social media, they didn’t need permission to take them. However, the court and the Privacy Commissioner disagreed. It found that social media is not a publication within the meaning of BC’s Personal Information Protection Act (PIPA).
In the legislation, there is an exception for information in publications like newspapers or books. The court ruled that social media is different because users are the ones creating the content and they maintain a level of control over it.The law allows companies to use data without consent if a reasonable person would think the purpose is appropriate. The court found Clearview’s mass scraping for a commercial facial recognition service was not a reasonable purpose, especially since it used highly sensitive biometric data and was completely unrelated to why people posted the photos in the first place.
Clearview tried to argue that BC laws shouldn’t apply to them because they are a US company with no offices or servers in the province. The court rejected this, stating that because Clearview systematically targeted and acquired data from BC residents to build its business, there was a real and substantial connection to the province. It was about people, not places.
What Did the Court Rule?
The Court of Appeal dismissed Clearview’s appeal, upholding a previous order from the Privacy Commissioner. The ruling confirms that Clearview is prohibited from offering its services in British Columbia. The company must use best efforts to stop collecting images of people in BC without their consent. The company must use best efforts to delete the facial data of BC residents already in its database.
What Does This Mean Going Forward?
This decision is a major win for individual privacy in the age of Big Data. It sends a clear message to international tech giants and AI bots: you cannot ignore local privacy laws just because you operate on the internet.
Going forward, this ruling reinforces that privacy is a quasi-constitutional right in Canada. It establishes that companies cannot scrape personal data from the web for profit and surveillance without facing the consequences of domestic privacy regulations.
For residents of British Columbia, it means your digital identity has a layer of protection against being turned into a tool for mass surveillance without your permission.
