OOF-AII-247774
Facebook's 'Tag Suggestions' Allegedly Stored Biometric Data without User Consent
Facebook's initial version of the its Tag Suggestions feature where users were offered suggestions about the identity of people's faces in photos allegedly stored biometric data without consent, violating the Illinois Biometric Information Privacy Act.
- Event date
- 2015-06-14
- Country
- United States of America
- Severity
- Moderate
- Evidence state
- Single-source
Assessment status
Generated from available public incident evidence using OOF® governance methodology. It is not an official investigation, legal determination, regulatory finding, certification, or OOF® Approved Assessment.
View source record from AI Incident Database (Responsible AI Collaborative)
Assessment confidence dimensions
- Source corroboration
- Single-source
- Extraction completeness
- High
- Methodological assignment confidence
- Limited
Measures source-group corroboration only; it does not establish factual truth.
Measures populated source fields after deterministic normalization; it does not measure correctness.
Measures automated assignment support; substantive correctness requires authorized human review.
Known facts from the incident record
- The incident record identifies the event date as 2015-06-14.
- The incident record identifies the location as United States of America.
Reported claims
- Facebook's initial version of the its Tag Suggestions feature where users were offered suggestions about the identity of people's faces in photos allegedly stored biometric data without consent, violating the Illinois Biometric Information Privacy Act.
Material unknowns
- Independent corroboration is not established in the available incident record.
Primary governance problem
The incident appears to expose a governance problem involving recognition, classification. Available reporting supports preliminary methodological interpretation, not a finding of fault or non-compliance.
Architecture intelligence
VFM® — Value Flow Mechanisms Architecture
Primary architecture
The reported recognition, classification concern falls within the governed questions represented by VFM® — Value Flow Mechanisms Architecture.
Governance focus: How should recognition, classification be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
PGA™ — Prediction Governance Architecture
Contributing architecture
The reported information, communication concern falls within the governed questions represented by PGA™ — Prediction Governance Architecture.
Governance focus: How should information, communication be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
ASGA™ — Autonomous Systems Governance Architecture
Contributing architecture
The reported identity, arts, classification concern falls within the governed questions represented by ASGA™ — Autonomous Systems Governance Architecture.
Governance focus: How should identity, arts, classification be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
MGIA™ — Memory Governance Intelligence Architecture
Contributing architecture
The reported user concern falls within the governed questions represented by MGIA™ — Memory Governance Intelligence Architecture.
Governance focus: How should user be governed in the conditions described by the available incident evidence?
Deeper methodology is withheld because the available evidence does not justify a Parent Standard or Core Module.
Preliminary governance questions
- How should recognition, classification be governed in the conditions described by the available incident evidence?
- How should information, communication be governed in the conditions described by the available incident evidence?
- How should identity, arts, classification be governed in the conditions described by the available incident evidence?
- How should user be governed in the conditions described by the available incident evidence?
- What operational authority and controls applied to Facebook at the relevant time?
Evidence gaps and limitations
- Only one independent source group is represented; corroboration is not established.
- AI technology is not specified in the source record.