SpaceXAI Faced Class Action Lawsuits in Chicago
Plaintiffs allege the AI model scans facial features in uploaded photos without obtaining required user consent.
Updated on Oct. 14, 2026 in Artificial Intelligence
Live Poll
Do you trust tech companies to handle your biometric facial data responsibly?
Plaintiffs filed two class action lawsuits against SpaceXAI in Chicago on October 7 and 12, 2026. The suits allege that Grok scans facial data in violation of the Illinois Biometric Information Privacy Act.
Why it matters
The litigation highlights the increasing friction between generative AI model training and state-level data privacy statutes. This case tests how existing biometric protection frameworks apply to automated facial mapping performed by cloud-based AI tools.
The Illinois Biometric Information Privacy Act requires written notice and signed consent for biometric data collection. Grok maps facial details, including the shape and positioning of the eyes, nose, lips and jaw, to process user-uploaded imagery.
The players
SpaceXAI
An artificial intelligence entity currently developing large-scale generative models and facing multiple legal challenges regarding data privacy.
Purdue University
An academic institution whose researchers focus on on-device data security and privacy-preserving AI image processing.
The details
The lawsuits allege that SpaceXAI collects biometric markers without explicit authorization from the subject. Researchers at Purdue University have developed a tool called PrivateEdit, which masks identity-sensitive facial regions on-device before images are uploaded to the cloud for processing, as a potential mitigation strategy for this type of data exposure.
Timeline
August 2, 2026: European Union AI Act obligations began enforcement.
October 7, 2026: The first class action lawsuit was filed in Chicago.
October 12, 2026: A second class action lawsuit was filed in Chicago.
The Tech Race
The lawsuit against SpaceXAI marks the latest attempt to apply the Illinois Biometric Information Privacy Act to AI-based facial scanning, following high-profile settlements like the $650 million Facebook case. It follows an established pattern where companies face significant financial penalties for failing to secure written consent for biometric data collection.
Users in Illinois are currently governed by laws requiring explicit written consent for the storage of biometric data by AI services. While specific remediation for users has not been determined, the outcome of this case may force providers to implement on-device privacy masking or change data policies.
The takeaway
The case underscores that standard terms of service may not provide immunity against state-level biometric privacy mandates. Stakeholders should track the evolving legal definitions of 'biometric data' as applied to automated feature mapping versus static image storage.
Further reading
For broader trends in AI compliance and regulation, see our coverage of Artificial Intelligence.
Source note: This article includes information reported by Cryptopolitan.
Live Poll
Do you trust tech companies to handle your biometric facial data responsibly?
