TL;DR: how do we get the data this company collected on us without also giving them our government-issued IDs that they could potentially keep and tie to our "profiles"?
A week ago (January 25th), the New York Times reported that Clearview AI, a neural-network-based facial recognition software, has collected and stored over 3 billion names, photos and addresses. The company's software is marketed to law enforcement officials, but the database is filled with publicly-available data scraped from sites like Facebook, Twitter, etc. Concerns are growing that the database could infringe upon personal freedoms, specifically the right to privacy when used in conjunction with state-of-the-art mathematical facial recognition algorithms recently published. I agree with those sentiments, this technology is dangerous.
Requests to exercise data protection rights can be submitted here to firstname.lastname@example.org. (see below for further instructions)
These rights are subject to limitations that vary by jurisdiction. We will honor such requests, withdrawal or objection as required under applicable data protection rules but these rights are not absolute: they do not always apply and exemptions may be engaged. Clearview does require that persons requesting the sharing or deletion of their personal data provide us with information to verify their identity and to facilitate the processing of data requests. While most of this information is deleted after the completion of the request, Clearview is required to retain some of this information to maintain a record of data rights requests. If we do not comply with your request, we will explain why.
Updates to this Policy
The language of this policy, combined with the fact that it was updated while the news is breaking about growing concerns about its potential impacts on privacy makes me very concerned.
This company, not unlike others in modern history, has scraped or purchased billions of data points containing personally-identifying information (names, photos, addresses, etc.) of American (and likely many other countries') citizens. In order to know what they've collected on us, we have to give them a government-issued ID??
How can I (we) get what data this company has on us without further violating our own personal right to privacy?
Side note/bonus question: is this kind of software not a direct violation of our Fifth Amendment rights to privacy of personal information?