Meta Sued Over Alleged Biometric Data Harvesting for AI and Smart Glasses

A proposed federal class action lawsuit filed in Chicago has accused Meta of illegally extracting biometric information from millions of Facebook and Instagram users to train its generative AI models and develop unreleased facial-recognition technology. The complaint, filed by parents from Illinois and California, alleges that the company harvested facial data from user photographs without notice or consent, violating privacy laws in both states. The litigation centers on the alleged use of this data for Meta's Emu and Muse Image generative AI systems, as well as a secret facial-recognition feature known as NameTag, which was reportedly embedded in the company's smart glasses companion app.

While Meta has denied the allegations and characterized the lawsuit as meritless, the case highlights growing scrutiny over the company's data practices. The plaintiffs claim that Meta's business model has long relied on the unauthorized collection and monetization of personal information, citing the company's history of biometric privacy disputes. The lawsuit seeks statutory damages for both intentional and negligent violations, with the proposed class potentially including millions of users whose images were uploaded to Meta platforms or submitted to its AI systems since September 2021. The legal battle now moves toward the discovery phase, where the scope of Meta's data usage and the existence of any central face database will be central points of contention.

The lawsuit draws heavily on reports that code for a facial-recognition system called NameTag was secretly embedded in the Meta glasses AI companion app, which has been downloaded more than 50 million times. Although the feature was never enabled for consumers, technical analysis revealed that the system was designed to convert faces captured by the glasses into unique biometric signatures, or faceprints, and compare them against a database stored on the user's phone. The complaint alleges that these faceprints were likely derived from Facebook and Instagram profile photos, a claim supported by company patents and internal discussions regarding the glasses' ability to identify individuals.

Meta has consistently maintained that it is not building a universal face database and that NameTag was merely an exploratory project that never shipped to consumers. Following public reporting on the code in June 2026, the company removed the feature from its app. However, the plaintiffs argue that the mere presence of functional code in a widely distributed app constitutes a violation of privacy rights, regardless of whether the feature was active. The litigation will likely focus on whether the development of such a system, even in a prototype stage, required explicit user consent for the processing of biometric data.

Beyond the smart glasses, the lawsuit targets the training processes for Meta's generative AI models, specifically Emu and Muse Image. The complaint alleges that Meta illegally harvested biometric information from the vast quantities of Facebook and Instagram images used to train these systems. Meta's leadership has previously described its social media platforms as a significant data advantage for its AI development, a point the plaintiffs now use to argue that the company knowingly utilized personal data without proper authorization.

This aspect of the case touches on broader industry debates regarding the use of public social media content for AI training. While Meta claims it has been transparent about its data usage, the plaintiffs contend that the extraction of biometric identifiers from photos goes beyond standard training practices. The lawsuit specifically points to the temporary release of a feature in Muse Image that allowed users to generate images based on other people's public Instagram accounts, which Meta removed shortly after launch, as evidence of the company's disregard for privacy boundaries.

The current lawsuit is the latest in a series of legal challenges Meta has faced regarding its handling of biometric data. In 2020, the company agreed to a $650 million settlement to resolve an Illinois class action over an earlier face-recognition system, which ultimately led to the deletion of more than a billion faceprints. More recently, in 2024, Meta paid $1.4 billion to the State of Texas to resolve allegations that it had unlawfully collected biometric data from residents.

These prior settlements provide a backdrop for the current case, though they do not serve as proof of the allegations in the 2026 filing. The plaintiffs are seeking $5,000 for each intentional or reckless violation and $1,000 for each negligent violation under Illinois' Biometric Information Privacy Act. As the case proceeds, the court will need to determine whether the specific data processing activities described in the complaint meet the threshold for these statutory penalties, a process that could take years to resolve.

The proposed class action is currently in its early stages, with the allegations yet to be adjudicated in federal court. The next procedural milestones will involve class certification, where the court will decide if the case can proceed on behalf of the millions of users identified by the plaintiffs. Meta is expected to continue its defense by challenging the merits of the claims and the scope of the proposed class.

There is currently no established payout or settlement for users, and the court has not made any findings regarding the company's data practices. The litigation will likely involve extensive discovery into Meta's internal development processes for both NameTag and its generative AI models. For now, the case remains a significant test of how existing biometric privacy laws apply to the rapid development of AI and augmented reality technologies.