Explaining the decision James Castro-Edwards, data privacy lawyer from Arnold & Porter told the BBC that, “Clearview only provided services to non-UK/EU law enforcement or national security bodies and their contractors.”
“The appeal turned exclusively on the fact that Clearview’s customers were overseas national security and law enforcement bodies, and so shouldn’t be relied on as granting a blanket permission for such scraping activities more generally.”
And thats why you need a GDPR and enforce businesses to store their data on servers under European authority.