The Dutch data protection watchdog on Tuesday issued facial recognition startup Clearview AI with a fine of 30.5 million euros (£25,600 million) over its creation of what the agency called an “illegal database” of billion of photos of faces.

The Netherlands’ Data Protection Agency, or DPA, also told Dutch companies that using Clearview’s services is also banned.

The data agency said that Clearview “has not objected to this decision and is therefore unable to appeal against the fine”.

But in a statement, Clearview’s chief legal officer, Jack Mulcaire, said the decision is “unlawful, devoid of due process and is unenforceable”.

The agency said that building the database and insufficiently informing people whose images appear in the database amounted to serious breaches of the European Union’s General Data Protection Regulation.

“Facial recognition is a highly intrusive technology, that you cannot simply unleash on anyone in the world,” DPA chairman Aleid Wolfsen said in a statement.

“If there is a photo of you on the Internet – and doesn’t that apply to all of us? –  then you can end up in the database of Clearview and be tracked.

“This is not a doom scenario from a scary film. Nor is it something that could only be done in China,” he said.

DPA said that if Clearview does not halt the breaches of the regulation, it faces noncompliance penalties of up to 5.1 million euros (£4.3 million) on top of the fine.

Mr Mulcaire said in his statement that Clearview does not fall under EU data protection regulations.

“Clearview AI does not have a place of business in the Netherlands or the EU, it does not have any customers in the Netherlands or the EU, and does not undertake any activities that would otherwise mean it is subject to the GDPR,” he said.

In June, Clearview reached a settlement in a lawsuit in the US alleging its massive photographic collection of faces violated the subjects’ privacy rights, a deal that lawyers estimate could be worth more than 50 million dollars (£40 million).

Clearview did not admit any liability as part of the settlement agreement.

The case in Illinois consolidated legal action from around the US filed against Clearview, which pulled photos from social media and elsewhere on the internet to create a database that it sold to businesses, individuals and government entities.