Facebook privacy lawsuit over facial recognition leads to $650M settlement

The judge in the case signs off on the settlement, calling it one of the biggest ever in a privacy suit.

Edward Moyer Senior Editor
Edward Moyer is a senior editor at CNET and a many-year veteran of the writing and editing world. He enjoys taking sentences apart and putting them back together. He also likes making them from scratch. ¶ For nearly a quarter of a century, he's edited and written stories about various aspects of the technology world, from the US National Security Agency's controversial spying techniques to historic NASA space missions to 3D-printed works of fine art. Before that, he wrote about movies, musicians, artists and subcultures.
  • Ed was a member of the CNET crew that won a National Magazine Award from the American Society of Magazine Editors for general excellence online. He's also edited pieces that've nabbed prizes from the Society of Professional Journalists and others.
Edward Moyer
2 min read
Facebook CEO Mark Zuckerberg.

Facebook CEO Mark Zuckerberg.

James Martin/CNET

A judge has approved what he called one of the largest-ever settlements of a privacy lawsuit, giving a thumbs-up Friday to Facebook paying $650 million to users who alleged the company created and stored scans of their faces without permission.

The class-action suit, filed in Illinois in 2015, involved Facebook's use of facial recognition technology in its photo-tagging feature. With that feature, users can tag friends in photos uploaded to Facebook, creating links to the friends' profiles.

The site's Tag Suggestions program generated automatic suggestions by using scans of previously uploaded images to identify people in newly uploaded shots. The lawsuit alleged that the scans were created without user consent and violated Illinois' Biometric Information Privacy Act, which regulates facial recognition, fingerprinting and other biometric technologies in the state.

"Biometrics is one of the two primary battlegrounds, along with geolocation, that will define our privacy rights for the next generation," Attorney Jay Edelson, who filed the lawsuit, said in January of 2020. At the time, Facebook had proposed a settlement of $550 million. But the following July, the judge in the case, US District Judge James Donato, said that figure wasn't high enough.

The final settlement will "put at least $345 into the hands of every class member interested in being compensated," Donato said in his Friday order approving the arrangement. "By any measure, the $650 million settlement ... is a landmark result," he said. "It is one the largest settlements ever for a privacy violation."

Facebook said in a statement Saturday that it's "pleased to have reached a settlement so we can move past this matter, which is in the best interest of our community and our shareholders."

Illinois' Biometric Information Privacy Act has affected other companies as well. Sony's robot dog, Aibo, has a camera in its nose, and facial recognition technology, so it can ID people around it and react accordingly. Consequently, Sony doesn't sell Aibo in Illinois. And last year, two kids in the state sued Google for allegedly collecting face scans of millions of students through its software tools for classrooms.