noyb has filed a lawsuit against the Hamburg Data Protection Authority, alleging that the authority has failed to act on illegal biometric data processing by PimEyes. The DPA considers PimEyes' facial recognition practices illegal but claims inaction due to the company's alleged location in Dubai. The case highlights enforcement challenges for GDPR violations involving cross‑border biometric data.
Why it matters: The suit underscores gaps in GDPR enforcement when controllers operate from third countries and process biometric data.
Summary generated from the sources below. Check the primary source before relying on it; this is not legal advice.
