Meta faces new federal class action lawsuit over allegations of unauthorized biometric data harvesting for AI development

A coalition of parents and their children from Illinois and California has initiated a significant legal challenge against Meta Platforms Inc., filing a proposed class-action lawsuit in the federal district court of Chicago. The plaintiffs allege that the social media giant systematically misappropriated private photographs from Facebook and Instagram to develop sophisticated, yet largely undisclosed, artificial intelligence tools. Central to the complaint are allegations that Meta utilized these images to train generative AI models, such as the Emu and Muse Image systems, and to construct the infrastructure for NameTag, an experimental facial recognition system designed for the company’s smart glasses.

The lawsuit centers on the claim that Meta’s data-gathering practices violate stringent privacy protections established under Illinois and California law. Specifically, the plaintiffs contend that the company harvested biometric identifiers—unique patterns derived from the human face—without obtaining the necessary consent or providing the legally required notice to users. This legal action, which seeks to represent millions of Americans whose images were uploaded to Meta platforms since September 2021, marks a new escalation in the ongoing tension between Silicon Valley’s rapid AI development and the individual right to privacy.

The Genesis of the NameTag Controversy

The scrutiny surrounding Meta’s facial recognition capabilities began in earnest in June 2024, when technical analysis revealed that code for a feature titled "NameTag" had been surreptitiously embedded within the Meta AI companion application. Despite the app having been downloaded more than 50 million times, the feature remained dormant for the average user. However, the presence of the code suggested that the system was engineered to capture faces through the lenses of smart glasses, convert those images into biometric signatures, and cross-reference them against a localized database of "faceprints" stored on the user’s mobile device.

While Meta initially characterized the reporting on this feature as misleading, the complaint posits that the underlying biometric data was likely sourced directly from the vast repositories of images hosted on Facebook and Instagram. Meta’s own internal documentation, including patents detailing cross-platform face matching against profile photographs, supports the plaintiffs’ assertion that the company possesses the technical capability to link real-world captures with digital identities stored within its ecosystem.

A Chronology of Privacy-Related Litigation

This lawsuit is far from an isolated incident; it serves as a continuation of a long-standing pattern of legal friction between Meta and regulatory bodies regarding the company’s handling of biometric information. The historical record of Meta’s privacy struggles provides a critical backdrop for the current allegations:

• 2004: The early days of Facebook are marked by controversy, including the emergence of private communications from CEO Mark Zuckerberg expressing a cavalier attitude toward user trust.
• 2020: Following years of litigation regarding its previous photo-tagging facial recognition system, Meta reached a historic $650 million settlement to resolve claims in Illinois under the Biometric Information Privacy Act (BIPA).
• November 2021: In a major policy shift, Meta announced the total shutdown of its facial recognition system and committed to deleting more than one billion individual faceprints.
• June 2024: Media investigations uncover the hidden NameTag code in Meta’s smart glasses application, leading to a public denial from the company and the subsequent removal of the code.
• 2024 (Ongoing): Meta agrees to a $1.4 billion settlement with the state of Texas to resolve allegations of unlawful biometric data collection.
• September 2026: Plaintiffs file the current class-action lawsuit in Chicago, alleging a continuation of unauthorized biometric extraction for AI training purposes.

The Role of Generative AI and Data Advantage

The complaint highlights a broader concern regarding the "data advantage" that Meta leverages to dominate the AI landscape. During investor calls and public statements, Meta’s leadership, including Chief Product Officer Chris Cox, has frequently described the enormous volume of Facebook and Instagram user content as a strategic asset for training generative models like Emu.

The plaintiffs argue that the training process for these models constitutes an illegal harvest of biometric data. The case also cites the short-lived release of Muse Image, an AI tool that allowed users to generate images based on the public Instagram accounts of other individuals. Although Meta withdrew the feature within days of its launch—admitting that the release "missed the mark"—the plaintiffs argue that the incident confirms a systemic disregard for the ownership of personal likenesses in the pursuit of AI training data.

Corporate Defense and Official Stance

In response to the filing, a Meta spokesperson categorized the lawsuit as meritless and characterized the plaintiffs’ interpretation of the company’s operations as a misrepresentation. The company reiterated its commitment to transparency, asserting that it has been clear about how user information is utilized to improve AI products.

Regarding the NameTag technology, the company’s official position remains that the system never reached the consumer market and that no final decision has been made regarding its future deployment. Meta’s spokesperson emphasized, "If we do decide to roll something out, we will take a thoughtful approach and do so with full transparency. One decision we can be clear about—we are not building a universal face database."

Despite these assurances, Meta’s internal leadership has expressed conflicting sentiments. CTO Andrew Bosworth, while labeling previous reports on the company’s facial recognition work as "absolutely dishonest," later acknowledged on a podcast that a feature like NameTag would be a "great feature," specifically suggesting it could be used to help glasses wearers remember people they had previously met. This dichotomy between public denials and internal enthusiasm for biometric integration continues to fuel public distrust.

Legal and Economic Implications

The legal team representing the plaintiffs, led by Justin Boley of Wexler Boley & Elgersma, emphasizes that the core issue is the sanctity of biometric data. "People shouldn’t have to worry if their biometric information will be misused simply because their photographs appear on a social media platform," Boley stated.

The potential financial impact on Meta is substantial. Under the Illinois BIPA statute, which is widely considered one of the most stringent privacy laws in the United States, plaintiffs can seek statutory damages of $5,000 for each intentional or reckless violation, or $1,000 for each negligent violation. Given the scale of the proposed class, which encompasses millions of users across Illinois, California, and the broader United States, the potential liability could reach into the billions of dollars if the case proceeds to a judgment against the company.

Beyond the financial repercussions, the lawsuit carries profound implications for the future of AI development. If the court finds that the use of public images for the purpose of biometric training or generative model development constitutes an unauthorized appropriation, the ruling could force a paradigm shift in how AI companies source their training data. It may necessitate a move toward "opt-in" models for data usage, which could significantly slow the pace of AI innovation for companies that rely on the vast, freely accessible data pools of social media.

As the case moves through the federal court system, it will likely serve as a litmus test for the scope of BIPA and similar statutes in the era of generative AI. The judiciary will be tasked with determining whether the passive ingestion of public social media data for the purpose of creating biometric profiles violates the same fundamental rights as the active, manual tagging systems of the past. For now, the legal battle underscores a growing divide between the technological ambition of major platforms and the evolving legal expectations of the users who provide the raw material for that technology.