Amazon Ring Sued for Facial Recognition Technology: Here's Why It May Violate Privacy Laws
Ring's face-detecting AI is problematic, but it's far from the only security brand to use it.
Tyler Lacoma
CNET
3 min read
7/10
Key Takeaways
The class-action lawsuit, filed in Illinois federal court, alleges Ring's facial recognition features violate the Illinois Biometric Information Privacy Act (BIPA), which imposes penalties of $1,000 to $5,000 per violation.
Amazon has sold over 10 million Ring devices globally as of 2023, with millions of users potentially affected by the lawsuit if certified as a class.
Ring previously settled an FTC investigation in 2020 for $5.8 million over allegations that employees and contractors had unauthorized access to customer video feeds.
At least five US states—Illinois, Texas, Washington, California, and New York—have passed or are considering laws regulating biometric data collection, increasing legal risks for companies like Amazon.
The lawsuit specifically targets Ring's 'People Only' alerts and facial recognition features, which the company introduced in 2017 and later expanded with optional 'Familiar Faces' detection.
Amazon's Ring doorbell cameras are facing a fresh lawsuit over their facial recognition technology, alleging the company illegally collected and stored biometric data without users' consent. The class-action complaint, filed in Illinois federal court, claims Ring's 'People Only' alerts and other AI-powered features violate the state's Biometric Information Privacy Act (BIPA), one of the strictest privacy laws in the United States. This case adds to mounting legal and regulatory pressure on Amazon as it expands its home security empire with AI tools that many critics argue outpace existing privacy safeguards. Ring has long positioned its devices as neighborhood watch tools for the smart home era, but its face-detecting AI has drawn scrutiny for years. The company rolled out features like 'Person Detection' and 'Facial Recognition' that allow cameras to differentiate between familiar faces and strangers—but privacy advocates say those capabilities capture sensitive biometric data without clear disclosure or opt-in consent. BIPA requires companies to obtain written permission before collecting fingerprints, facial scans, or other biometric identifiers, and to clearly explain how that data will be stored and used. The lawsuit, filed on behalf of Illinois residents, seeks statutory damages of $1,000 to $5,000 per violation, which could total hundreds of millions of dollars if the class covers thousands of users. Amazon has defended Ring's features as optional and privacy-focused, noting that users must manually enable facial recognition and that the data is encrypted. However, critics argue that default settings and confusing privacy menus make meaningful consent nearly impossible. This is not Ring's first privacy scandal. In 2020, the company paid $5.8 million to settle Federal Trade Commission charges that it allowed employees and contractors to access customer video feeds without authorization. The new lawsuit, while centered on Illinois law, could have national implications—other states like Texas, Washington, and California are considering or have already passed similar biometric privacy laws. Legal observers say the outcome could set a precedent for how smart doorbells and AI-powered cameras handle facial data, especially as police departments increasingly rely on Ring footage for investigations. The case also highlights a broader tension: consumers want security, but not at the cost of their privacy. Amazon Ring faces an uphill battle in court, but even if it wins, the public conversation around AI surveillance at the doorstep is just beginning. The next milestone will be a motion to dismiss, expected within 60 days, followed by discovery that could reveal how Ring truly collects, stores, and shares biometric data.
Frequently Asked Questions
The lawsuit alleges Amazon Ring's facial recognition technology violates the Illinois Biometric Information Privacy Act (BIPA) by collecting and storing users' biometric data without their informed consent. The class-action seeks damages for Illinois residents who owned Ring devices with face detection features enabled.
Ring's cameras can identify and label specific people, a feature critics say captures facial geometry data without proper disclosure. BIPA requires companies to obtain written consent before collecting biometric data and to publish data retention policies, which the lawsuit claims Ring failed to do.
The primary law is the Illinois Biometric Information Privacy Act (BIPA), which allows individuals to sue for $1,000 to $5,000 per violation. Other states like Texas and Washington have similar laws that could lead to additional lawsuits.
Users concerned about privacy should disable facial recognition features in Ring's app settings and review the company's privacy policy. If you are an Illinois resident, you may be eligible to join the class action; consult an attorney for guidance.
Amazon could settle for a large sum to avoid trial, similar to the 2020 FTC settlement, or fight the case in court. A ruling against Ring could force Amazon to redesign its facial recognition features and pay substantial damages, while a favorable outcome may set a precedent for how BIPA applies to smart home devices.
