Clearview AI, a US-based facial recognition technology firm, has successfully challenged a £7.5 million fine imposed by the UK's privacy watchdog, the Information Commissioner's Office (ICO), for unlawfully storing facial images of UK citizens. The first-tier tribunal concluded that the ICO "did not have jurisdiction" to issue a fine or take enforcement action, despite Clearview's processing of data pertaining to individuals in the UK; but also made a number of interesting findings regarding: extraterritoriality; the definition of "behavioural monitoring"; and the issue of joint controllership (amongst others).  In our latest Bitesize Legal Update, Fieldfisher's Flick Fisher and Megan Ward cut right to the chase, and discuss the key takeaways from the decision and what the practical implications are for businesses.