Smith v. Wilson et al

On January 13, 2026, Jane Smith filed a class-action lawsuit against Robert Wilson, former CTO of NexGen AI Corp., and associated entities for unauthorized use of personal biometric data. The defendants allegedly scraped millions of facial images and voice recordings from social media to train a commercial emotion-recognition AI without consent. The case revealed that Wilson had directed DataStream LLC to collect and process this sensitive information, violating multiple state privacy statutes and federal wiretapping laws. The suit sought injunctive relief and statutory damages for affected individuals.

The court granted class certification and ruled in favor of the plaintiff, finding defendants jointly and severally liable for violating the Illinois Biometric Information Privacy Act and the federal Electronic Communications Privacy Act. A settlement of $650 million was approved, and a permanent injunction barred the companies from using unauthorized biometric data in future products.

The central dispute was whether collecting publicly posted biometric data for AI training constitutes an invasion of privacy and a violation of biometric information privacy acts, and whether corporate officers can be held personally liable for directing such data collection.

The decision triggered sweeping changes in U.S. data privacy enforcement, leading to the introduction of the federal Biometric Data Protection Act. Public awareness around AI training data sourcing surged, forcing major tech companies to audit their datasets. It also accelerated state-level legislation mandating explicit consent for biometric data collection, reshaping the AI development landscape.