Apple and Google Fined R$19M Over FaceApp Privacy Breach

FaceApp is an AI system that processes user images to generate altered photos using AI techniques. The legal condemnation relates to the app's storage of user data without proper consent, constituting a violation of privacy rights under applicable law. Apple and Google, as distributors of the app, are implicated. Since the harm (violation of rights) has already occurred and is directly linked to the AI system's use and data practices, this event meets the criteria for an AI Incident under violations of human rights or breach of legal obligations protecting fundamental rights.

FaceApp is an AI-powered application that processes user images using AI techniques. The legal ruling highlights that the app collected sensitive data without clear consent and shared it improperly, violating data protection laws and consumer rights. The involvement of AI in the app's operation and the resulting legal harm to users' rights meet the criteria for an AI Incident. The harm is realized (not just potential), and the AI system's use directly led to the violation of rights and legal consequences. Hence, the event is classified as an AI Incident.

The event involves an AI-related application (FaceApp) that processes personal data, which is an AI system by definition as it infers from input data to generate outputs affecting users. The violation of data protection laws and improper handling of sensitive data constitutes a breach of fundamental rights (privacy and data protection). Since the harm (violation of rights and consumer protection laws) has already occurred and legal consequences are being applied, this qualifies as an AI Incident under the framework, specifically under violations of human rights or breach of applicable law protecting fundamental rights.

FaceApp is an AI system that processes user images using AI techniques. The incident involves the use of this AI system leading to violations of data protection laws and consumer rights, which are legal rights protecting personal data and privacy. The ruling and the described harms (unauthorized data collection and sharing, lack of clear consent) constitute violations of rights under applicable law, fitting the definition of an AI Incident. The AI system's use directly led to these harms, and the legal condemnation confirms the harm has materialized.