In March, the Ukrainian government began using Clearview facial recognition. The technology is presumably applied to spot Russian operatives in Ukraine, as well as identify Ukrainian victims of war and fallen Russian soldiers. Some may say this is right – all if fair in love and war. But is it?
The US-based Clearview AI collects photos publicly available on the Internet, complies them into a database (currently about 10 billion images) and allows users (law enforcement) to run image-based search requests. The requests are processed with the help of what Clearview claims to be is a highly-effective AI, allowing identification even in cases of facial damage.
The database has already been used, among others, by Dutch and Belgian law enforcement, triggering a nation-wide outcry in both cases. No wonder, as, from a data protection perspective, the company’s activities are highly controversial.
First and foremost, under the GDPR, photographs processed for identification purposes are biometric data. It falls under special categories of data, whose processing, in principle, is prohibited. Clearview states that it only collects public data. Yet it is clear that individuals don’t manifestly make their photos public for biometric identification, so the relevant exception does not apply. Moreover, users of social networks – even with open profiles – never explicitly consented to their data being collected by a third party, then sold to law enforcement, and used for intrusive searches with potentially adverse consequences.
The large-scale collection of biometric data with no consent, virtually uncapped data retention and unclear or limited data subjects’ rights are worrying already in peaceful times. Using the Clearview technology in war is even more alarming.
If the living are identified, a false positive may lead to arrest in an ordinary situation, but result in death in times of war. Ukrainian officials are receiving training from Clearview on working with its database. Yet it remains a question if this can mitigate the anger and stress of war – and the decisions driven by them.
And as to identifying the deceased, sending photos of fallen Russian soldiers to their relatives, even if there is no mistake, crosses an ethical line. The fact that Russia started a war of unspeakable brutality shouldn’t make us forget where that line is – and I am saying this as a person who had to flee that war.
So, à la guerre comme à la guerre? I suggest Ukraine recall instead that the ends do not justify the means and reject Clearview.
 Recital 51.
 Article 9 (1).
 Article 9 (2)(e).
 Article 9 (2)(a).
 Section 1798.130.
 Section 1798.100.