[N] Potential for legislation over the use of the MegaFace dataset
It seems as though there is an Illinois state law that could be violated with the use of the MegaFace dataset. From the article:
By law, most Americans in the database don’t need to be asked for their permission — but the Papas should have been.
As residents of Illinois, they are protected by one of the strictest state privacy laws on the books: the Biometric Information Privacy Act, a 2008 measure that imposes financial penalties for using an Illinoisan’s fingerprints or face scans without consent. Those who used the database — companies including Google, Amazon, Mitsubishi Electric, Tencent and SenseTime — appear to have been unaware of the law, and as a result may have huge financial liability, according to several lawyers and law professors familiar with the legislation.
I’m just wondering how best to ensure researchers factor these concerns in when collecting massive datasets online. For example, I’ve recently collected a text dataset for my research. What do you all do to account for people’s privacy when collecting data?