Clearview AI Loses in Canada: You Can't Escape Privacy Law

A historic courthouse facade with stone columns and engraved lettering

TL;DR: British Columbia’s Court of Appeal just handed Clearview AI a loss. The facial recognition company tried to argue that Canadian privacy law can’t touch a U.S. company that left the Canadian market. The court disagreed. If you scrape the faces of people in a jurisdiction, you’re subject to that jurisdiction’s laws, even if you later pack up and leave. The ruling matters beyond Canada: it signals that tech companies can’t vacuum up biometric data globally and then claim immunity by fleeing when regulators come knocking.

The Ruling

On February 19, 2026, BC’s Court of Appeal dismissed Clearview AI’s judicial review bid [1]. The company wanted to overturn findings from a joint investigation by four Canadian privacy commissioners that found Clearview had violated both provincial and federal privacy laws.

Clearview’s argument was straightforward: we’re a U.S. company, we left Canada during the investigation, your laws don’t reach us.

The court’s response was equally straightforward: yes, they do.

The judges found that Clearview’s “collection of online facial data from people in B.C.” established “a real and substantial connection between it and the province.” That connection doesn’t disappear because Clearview stopped selling to Canadian clients [1][2].

Clearview’s Exit Strategy

Here’s the timeline:

2020: Clearview starts marketing facial recognition to Canadian law enforcement, including the RCMP [3]
February 2020: Privacy commissioners from BC, Alberta, Québec, and Canada launch a joint investigation [4]
July 2020: Clearview “voluntarily” exits Canada while the investigation is ongoing [4]
February 2021: Commissioners publish their findings: Clearview violated privacy law [4]
2021: BC’s commissioner orders Clearview to stop offering services in Canada and delete the data [2]
February 2026: Clearview’s appeal fails

Clearview’s position was that by leaving Canada, it had escaped Canadian jurisdiction. The company’s lawyers essentially argued that any internet-based company could scrape data from Canadian residents, face an investigation, and then simply exit the market to avoid consequences.

The court didn’t buy it. Accepting that argument, the judges wrote, “would mean that it, and any other company that acquires personal information on the internet using a global search engine, would be immune from domestic privacy laws” [1].

What Clearview Actually Did

The 2021 joint investigation laid out the facts [4]:

Clearview scraped over 3 billion facial images globally (now over 50 billion) from websites including Facebook, Instagram, YouTube, Twitter, and Venmo
The company created biometric identifiers (faceprints) from each image
Clearview sold search access to law enforcement: upload a face, get matches
The scraping violated the terms of service of every platform Clearview harvested from
Nobody whose face was scraped gave consent

The commissioners called it what it was: “mass identification and surveillance” by a private commercial entity [4].

The RCMP used Clearview’s system before the company pulled out of Canada. According to Clearview’s own records, the RCMP made hundreds of search requests across at least 19 accounts [3]. About 85% of those searches weren’t properly documented. The RCMP couldn’t account for why they were conducted [3].

The Global Pattern

Canada isn’t alone in trying to hold Clearview accountable. The company has racked up over €90 million in fines across Europe alone [5][6]:

Netherlands: €30.5 million (September 2024)
France: €20 million (2022)
Italy: €20 million
Greece: €20 million
UK: £7.5 million from the Information Commissioner’s Office
Australia: Found to have breached privacy law

Clearview’s response to all these fines? Essentially: you can’t make us pay. The company has argued that foreign regulators have no enforcement power over a U.S. company that doesn’t operate in their jurisdictions.

The BC ruling undercuts that logic. It establishes that the act of scraping creates jurisdiction. You don’t get to vacuum up biometric data from Canadian residents and then claim Canada can’t regulate you because you stopped doing business there.

Why This Matters

The BC ruling isn’t just about Clearview. It sets a precedent for how privacy law applies to international tech companies that harvest data across borders.

If the court had ruled the other way, here’s what would have been possible:

A company scrapes personal data from residents of Country X
Country X’s regulators investigate
Company exits Country X’s market
Company argues it’s now immune from Country X’s laws
Company keeps the data, faces no consequences

That playbook would have made privacy law meaningless for any company willing to hit and run.

The BC court closed that loophole. The connection is created by the act of collection, not by ongoing business operations. If you scrape data from BC residents, BC law applies. Even if you leave afterward.

The Enforcement Problem

Winning a ruling is one thing. Enforcement is another.

Clearview AI doesn’t operate in Canada. It doesn’t have Canadian assets. The 2021 order to delete data belonging to British Columbians remains in effect, but whether Clearview has actually complied is unclear.

European countries face the same problem. Over €90 million in fines, and Clearview hasn’t paid a cent. The company’s position is that European regulators can’t reach a U.S. company that doesn’t do business in Europe [5].

What Canada does have: leverage over any company that wants to do business in Canada in the future. Clearview’s leadership has changed recently (co-founder Hoan Ton-That resigned in December 2024 [7]). If new management wants to re-enter markets they fled, they’ll have to deal with outstanding orders first.

Meanwhile, in the U.S.

While Canada is telling Clearview to delete data and stop scraping faces, the U.S. government is buying access.

ICE signed a $9.2 million contract with Clearview in September 2025 [8]
CBP signed a $225,000 contract for 15 Clearview licenses in February 2026 [9]
DHS maintains a separate 1.2 billion face database through NEC’s Mobile Fortify system [10]

Clearview now has over 50 billion images in its database. It’s illegal to use in Canada, the EU, the UK, and Australia. But in the U.S., federal agencies are some of its biggest customers.

The company’s business model, in practice: scrape faces globally, take fines from countries that object, sell access to countries that don’t. The U.S. is in the second category.

What You Can Do

For Canadians

The Privacy Commissioner’s findings remain in effect. If you believe your image was scraped by Clearview, you can file a complaint with your provincial privacy commissioner. The BC ruling strengthens the legal basis for enforcement.

For Everyone

Clearview scrapes publicly accessible images. Lock down your social media profiles. Remove old public photos. Every image you leave exposed is another face in a 50-billion-image surveillance database that law enforcement can search. For more, see how to beat facial recognition.

The Clearview Opt-Out

Clearview offers a privacy request form to request deletion. The catch: you have to provide a photo to request removal. And it doesn’t stop law enforcement from searching for your face. It just (supposedly) removes you from the database.

Support the Legal Fight

The ACLU and EFF track facial recognition cases and push for bans. In Canada, organizations like the Open Rights Group and provincial civil liberties associations are fighting similar battles.