noyb files GDPR complaints against Scale AI's Outlier platform for invasive tracking and biometric verification

What happened

The privacy NGO noyb, together with partners, has lodged five GDPR complaints against Scale AI in France, Italy, the Netherlands and Austria. The complaints allege that Outlier places third‑party trackers on workers' devices and forces biometric verification without a legal basis, violating data‑minimisation and biometric data rules. No response to access requests is also claimed.

Why it matters for trust and compliance

• Its status is filed. The case is still open; the outcome may change what it means.
• The complaints highlight potential EU data‑protection breaches in AI‑training platform labor practices.
• It relates to GDPR. The regulations library explains what that law requires.

Who is affected

Recommended actions

1. Review consent, cookie and tracking practices against the requirement.
2. Check that privacy notices describe the practices this addresses.
3. Confirm access, correction, deletion and opt-out requests are handled within the required time.
4. Revisit retention schedules and data minimisation for the data involved.
5. Inventory where this data is shared or sold and whether opt-outs are honoured.
6. Inventory AI or automated decision systems in scope and their assessments.
7. Confirm handling of sensitive data categories meets the stricter rules.