On May 8, 2025, the Court of King’s Bench of Alberta released its decision in Clearview AI Inc. v Alberta (Information and Privacy Commissioner) (the Decision). The Decision found that certain provisions of Alberta’s private-sector privacy law which limit the scope of “publicly available” information violate subsection 2(b) of the Charter and are therefore unconstitutional. The Decision is noteworthy since it is the first time the constitutionality of certain sections of the Personal Information Protection Act (PIPA) has been considered.
Background
The Decision arose following a joint investigation by the Privacy Commissioners of Alberta, British Columbia, Quebec, and Canada into whether Clearview AI’s (Clearview) facial recognition tool breached private-sector privacy laws. The tool scrapes images and data from publicly accessible online sources to produce a facial recognition database.
Clearview argued that the personal information of Albertans its tool amassed was exempt from the requirement to obtain consent prior to its collection, use or disclosure under PIPA because the information was “publicly available” online. In relevant part, section 7(e) of PIPA’s regulation defines when personal information is “publicly available” as when it is “contained in a publication, including, but not limited to, a magazine, book or newspaper, whether in printed or electronic form”.
Following the investigation, the Privacy Commissioners issued a joint report (the Joint Report) which concluded Clearview was in breach of privacy laws in each of their respective jurisdictions. Of note, the Joint Report found the “publicly available” exception to consent did not extend to information available from online sources. Accordingly, Clearview was required, according to the Privacy Commissioners, to obtain consent from individuals for the collection, use and disclosure of their personal information in connection with its facial recognition tool, which it had failed to do.
Based on the Joint Report, the Information and Privacy Commissioner of Alberta (the Commissioner) ordered Clearview to:
- cease offering its facial recognition tool in Alberta;
- cease the collection, use and disclosure of images and biometric facial arrays collected from individuals in Alberta; and
- delete images and biometric facial arrays that had been collected from individuals in Alberta in its possession.
Clearview applied for judicial review of that order and challenged the constitutionality of the “publicly available” exception to consent found in sections 12, 17 and 20 of PIPA and subsection 7(e) of its regulation.
Commissioner’s decision was reasonable
On judicial review, Clearview argued it was unreasonable for the Commissioner to have interpreted the “publicly available” exception to consent as not applying to information available from online sources. The Court disagreed, finding the Commissioner’s narrow construction of “publicly available” which excluded online sources to be reasonable.
“Publicly available” exception to consent requirement found unconstitutional
Given the Court’s view that the words “publicly available” do not apply to online sources, an organization seeking to collect, use or disclose personal information from the internet must first obtain consent. However, Clearview argued in its constitutional challenge that this requirement is a limit on its freedom of expression, asserting that scraping the internet to gather images and information is an “expressive activity” which is restricted by PIPA’s consent requirements. The Court agreed, finding that Clearview’s internet scraping is part of a process that leads to the conveyance of meaning in the form of facial recognition.
The Court noted that where obtaining consent is impractical, such as in mass scraping of online content, the consent requirement amounts to a complete prohibition on the collection, use, and disclosure of personal information. While the Commissioner was concerned that Clearview’s online scraping was not for reasonable purposes, the prohibition applies even for purposes that are reasonable. As such, the Court concluded that PIPA’s consent requirement restricts freedom of expression. Further, under the canonical Oakes test, the restriction is not justified.
As a result, the Court found that sections 12, 17 and 20 of PIPA and subsection 7(e) of its regulation were unconstitutional for violating subsection 2(b) of the Charter. The appropriate remedy was to strike the words “including, but not limited to, a magazine, book or newspaper” from the description of “publicly available” and leave “publication” to take its ordinary meaning as “something that has been intentionally made public.”
Finally, the Court noted even where personal information is not subject to a consent requirement, it still cannot be collected or used by an organization except for purposes that are reasonable. Clearview asserted that its purpose was to provide a service to law enforcement agencies. The Court disagreed, accepting the Commissioner’s finding that Clearview’s purpose was “the mass identification and surveillance of individuals by a private entity in the course of commercial activity” and that such a purpose was not reasonable. So, Clearview is not permitted to use its facial recognition tool in this particular case despite the striking down of the description of “publicly available”.
Key takeaways
The Decision broadens what constitutes “publicly available” information as an exception to PIPA’s consent requirements for the collection, use and disclosure of personal information.
Ultimately, this finding was little consolation to Clearview as it was still required to cease offering its services in Alberta and delete all previously collected personal information of Albertans. However, the Decision is nevertheless significant as it clarifies that the personal information of individuals may be collected without consent when “publicly available” online, assuming the purpose for doing so is reasonable, and places further constraints on PIPA’s consent requirement which is a fundamental tenet on which PIPA and other Canadian privacy laws are built.
In a time when the adoption and development of artificial intelligence is continuing at a torrid pace, which in many cases involves scraping of content available online to train underlying models, the privacy interests of Albertans in the collection, use and disclosure of their personal information in association with such activities is more limited today than it was before the Decision was released.
Any article or other information or content expressed or made available in this Section is that of the respective author(s) and not of the OBA.