What happened
The privacy NGO noyb, together with partners, lodged five GDPR complaints in France, Italy, the Netherlands and Austria against US‑based Scale AI. The complaints allege illegal placement of trackers on workers’ devices without consent, excessive collection of personal data, and forced biometric verification. No response to access requests was provided, breaching GDPR rights.
Why it matters for trust and compliance
- Its status is filed. The case is still open; the outcome may change what it means.
- The filings highlight potential GDPR violations by an AI training platform that surveils its freelance workforce, prompting EU data‑protection authorities to investigate.
- It relates to GDPR. The regulations library explains what that law requires.
Who is affected
technology controller processor data subject Scale AI Outlier Persona
Recommended actions
- Review consent, cookie and tracking practices against the requirement.
- Check that privacy notices describe the practices this addresses.
- Confirm access, correction, deletion and opt-out requests are handled within the required time.
- Revisit retention schedules and data minimisation for the data involved.
- Inventory where this data is shared or sold and whether opt-outs are honoured.
- Inventory AI or automated decision systems in scope and their assessments.
- Confirm handling of sensitive data categories meets the stricter rules.