PimEyes: Facial Recognition Available to Anyone Online

PimEyes operates a publicly available facial recognition search engine that allows anyone to upload a photo of a face and find matching images across the internet. According to a 2022 New York Times investigation, the service was used by stalkers to identify and locate victims, by abusive partners to track ex-spouses, and by individuals to unmask anonymous adults in compromising situations. PimEyes claims to only allow users to search for their own face, but the enforcement mechanism is minimal — any photo can be uploaded with no verification. The service reportedly indexes billions of faces from publicly accessible web pages. Poland's data protection authority fined PimEyes in 2022 for GDPR violations, and multiple privacy regulators have investigated the service.

pimeyes has been the subject of increasing scrutiny over its facial recognition use practices. Privacy researchers and regulatory bodies across multiple jurisdictions have documented concerns about how the company handles user data, particularly regarding consent, transparency, and data minimization principles. The findings suggest a pattern of prioritizing business metrics over user privacy, a trend observed across the broader technology industry. Users affected by these practices have limited recourse without proactive intervention such as filing formal complaints with data protection authorities or submitting DSAR requests.

Regulatory responses have varied significantly. European data protection authorities have been more aggressive in enforcement under GDPR, while US enforcement remains fragmented across state-level privacy laws. The investigation highlights the need for stronger federal privacy legislation and more transparent corporate data practices. Affected users should consider reviewing their privacy settings, submitting data deletion requests, and exploring privacy-preserving alternatives recommended by independent researchers.